ea6a99d243565a14aa7cc87bd4c06f1105b358a11f51f1450c39a603af0df4f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea6a99d243565a14aa7cc87bd4c06f1105b358a11f51f1450c39a603af0df4f8
Size

63KB
MD5

74af27cc40fb05553f246440775dec19
SHA1

f21bfb14a81349f4d875aa4f24c4f12309af6c9d
SHA256

ea6a99d243565a14aa7cc87bd4c06f1105b358a11f51f1450c39a603af0df4f8
SHA512

1528dd2bec40b73fcdd12d878b510e93a31dcd9c2c826c7a948e838170d633dffa759f4f3c18cd0118a876fbc7de65610578019eb6780a1fa8c7719b59b24881
SSDEEP

1536:1t23S+RX0iI8iFNkQW37Tg7YY9XvTGfHfzn:1CS+RXZI8sN1ATuFGfbn

Score

N/A

Malware Config

Signatures

Files

ea6a99d243565a14aa7cc87bd4c06f1105b358a11f51f1450c39a603af0df4f8
.exe windows x86

5f84800c22d2bff123499feeb8fc0ffc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerLanguageNameW
ExpandEnvironmentStringsA
ScrollConsoleScreenBufferW
BackupWrite
GlobalUnfix
EscapeCommFunction
HeapSummary
MapViewOfFile
InterlockedCompareExchange
ReadFileEx
GetTempPathW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE