e7be11241e714246c452721c67f62179024bebf6f22c27f52e05a852a929f0ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7be11241e714246c452721c67f62179024bebf6f22c27f52e05a852a929f0ce
Size

120KB
MD5

55634acb89997767c21b4db343a14bf0
SHA1

ea195f4bd37906a95b9e560189fb736e034f00c4
SHA256

e7be11241e714246c452721c67f62179024bebf6f22c27f52e05a852a929f0ce
SHA512

cf91b53ef227f322cacfc7183baa80edd2527d92fcdba58ab93a7cf365e270efbe6c9f7f8bb11a97a0fdf16da897dda656c6cfc35eee8ebf5438df6bfed86e8e
SSDEEP

3072:JMkANtUbn7AevCMHgJGXxcRh6w7WCZvg41sORV1IeY6FC6LD3:zANtUbn75BHGuK66FlVGe06LD3

Score

N/A

Malware Config

Signatures

Files

e7be11241e714246c452721c67f62179024bebf6f22c27f52e05a852a929f0ce
.exe windows x86

5464a58801548004277e974e2b1b06b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
GetNumberFormatA
DeleteFileA
GetModuleHandleA
GetPrivateProfileIntA
FindNextVolumeW
GetStartupInfoW
lstrlenW
lstrcpyW
TlsGetValue
GetModuleFileNameW
GetLocaleInfoW
VirtualAlloc
SetCurrentDirectoryA
TlsAlloc
lstrcpyW
lstrcpyW
SetConsoleTitleA
GetCurrentProcess
lstrcpyW
lstrcpyW
TlsAlloc
CreateEventA

untfs

FormatEx
??0NTFS_BOOT_FILE@@QAE@XZ
Format
Chkdsk

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ORPC
Size: 1024B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE