ef6bf8c24b2e031607f486f3695a3d52c5f0398c36de9561361bf33b9cd04e80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef6bf8c24b2e031607f486f3695a3d52c5f0398c36de9561361bf33b9cd04e80
Size

96KB
MD5

6694751b90f30c73b557581d366e3b74
SHA1

264b7e92638bce6845ad60b98db96560c556288f
SHA256

ef6bf8c24b2e031607f486f3695a3d52c5f0398c36de9561361bf33b9cd04e80
SHA512

126e2d9c36cdf5ca584bda9bf0eaa3464947b9d341790b8db070479ce311b3febe2177d4c62ab8d81c9e03649df6f020bc3c37f3317d23d6c491a1cd00519bf5
SSDEEP

1536:bD0zYjq5jHk7nCnJxaljkmv/8ae8HYTcDmpjVrs2ryrd1vUQuqSuWnRrF4O5+n6W:bZW5jE7CnJxaSmsaeuGciHs2qmRlixH

Score

N/A

Malware Config

Signatures

Files

ef6bf8c24b2e031607f486f3695a3d52c5f0398c36de9561361bf33b9cd04e80
.exe windows x86

0e2be74c0c553cd51c74f3d71290da63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugActiveProcess
CreateProcessA
WriteConsoleA
QueryInformationJobObject
FreeResource
lstrcmpiA
InterlockedIncrement
SetTermsrvAppInstallMode
WriteFileGather
SetFirmwareEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE