edf2e45f97dea84f2f0053dda2abfd0a0d7db6f58085f5eb4bbc7f14c3465ded | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edf2e45f97dea84f2f0053dda2abfd0a0d7db6f58085f5eb4bbc7f14c3465ded
Size

235KB
MD5

5917c5e848ebe8e7df4eff3171c75db0
SHA1

a55495bdd1c3be9b441da5e3a01bf4187f769c0c
SHA256

edf2e45f97dea84f2f0053dda2abfd0a0d7db6f58085f5eb4bbc7f14c3465ded
SHA512

78f9fc410253272f9fd76e220e75f0276be7673e06b76305d8ceec1db8bf931edaba0912347f7356c497c2f991c0ace924f3d99d72939197cd135fdc8c25da8f
SSDEEP

3072:PyJz1HYiEV5p+V3l0nFuK42Szvj1gt9ktPsv2K75hIxR8QoiQ0tqnw7SFORGrSX:PW14ikP+VSuK42ykktPe5CRQt0tapOMG

Score

N/A

Malware Config

Signatures

Files

edf2e45f97dea84f2f0053dda2abfd0a0d7db6f58085f5eb4bbc7f14c3465ded
.exe windows x86

2717a120f3532759192746b08a75beea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
GetEnvironmentVariableW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE