ef5ec41e3446dde5b46fca74bbafc214836a50a0ccb49fa6e1faccaadc74684c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef5ec41e3446dde5b46fca74bbafc214836a50a0ccb49fa6e1faccaadc74684c
Size

196KB
MD5

1a955ab2d76b9ab07813c658591bcca2
SHA1

215d774cc1ade19a4759c92e95be35040dfd0ef3
SHA256

ef5ec41e3446dde5b46fca74bbafc214836a50a0ccb49fa6e1faccaadc74684c
SHA512

b133f94b0e8265a00298ee5e9ee2750c795733de24164e5cd8f60af9f3e977552528fa00c0771b6cc4ee19f1b9abdf88e93fd78bffd3efb8b12be734c7b89be2
SSDEEP

3072:GVmHcLY0bOV9/S9AJJjWm/73gAZdujVvPdwiWoQmAPSL0RFR0Yu7J:g1bOVpdJh//73TEhPdXAPSGn0B

Score

N/A

Malware Config

Signatures

Files

ef5ec41e3446dde5b46fca74bbafc214836a50a0ccb49fa6e1faccaadc74684c
.exe windows x86

fe1e6c576acc1b15c6ff53296e69202d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
IsBadReadPtr
GetProcAddress
GetOEMCP
GetCommandLineW
ExitProcess
GetACP
VirtualAllocEx
GetModuleHandleA
LoadLibraryExA
GetModuleHandleW
IsBadHugeReadPtr
GetCommandLineA

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ