e0c2709353864501a9d883d05eb59c5b6b2f1c27fd0569c66173e2193a58b700 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0c2709353864501a9d883d05eb59c5b6b2f1c27fd0569c66173e2193a58b700
Size

815KB
MD5

66d05ce2cc5975f110817c5daaf03520
SHA1

109668acdea96cc0ece3710c57c186dab6ffdd23
SHA256

e0c2709353864501a9d883d05eb59c5b6b2f1c27fd0569c66173e2193a58b700
SHA512

dc38c6370c644b841575cf8c338d83376a2f96dd1a2068601c40e0fe132cfcea060491ebf507f8ec38e0e1de7ec15e2557d38ed6538f92219327c45d7596b003
SSDEEP

12288:JQVWK4VX5plk58VbxsDx9tRFyy6qDmNzkdsw22wG1ooGrFkvrfGQtV7eWcvo7kRY:t/gebxM/fF99aNzkOrd0/fGQWdkkwqd

Score

N/A

Malware Config

Signatures

Files

e0c2709353864501a9d883d05eb59c5b6b2f1c27fd0569c66173e2193a58b700
.exe windows x86

c3b56582537e757c2a827ae29849e68d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateEventW
GetModuleHandleA
WriteConsoleA
GetLocaleInfoW
FormatMessageA
GetCurrentThread
GetFullPathNameW
TlsFree
VirtualFree
SetCurrentDirectoryW
TlsGetValue
GetPrivateProfileIntA
lstrcpynW
VirtualProtectEx
GetCommandLineA
DeleteFileW
GetStringTypeW
GetModuleFileNameW
lstrlenA

wmadmod

DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 13KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.udata
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ