eb9c82a6535be47af73a5458010c00b7549d48d97a23438924c72395c128231c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb9c82a6535be47af73a5458010c00b7549d48d97a23438924c72395c128231c
Size

83KB
MD5

66b594debb321bf2a6a411be12135474
SHA1

6292d5ad7a9be73f7ea5a6c472d4929fe1172c3b
SHA256

eb9c82a6535be47af73a5458010c00b7549d48d97a23438924c72395c128231c
SHA512

8af8452c2977f4295b30151065d7ae44a96e433966c098dccfb41b9fde53fccaba15feef055ec5b45e9cb526c12f5c8f32159a5e0cacfa7da5be8b4267dc7571
SSDEEP

1536:HFFFF1yLcmr19ixZC6Kp6yLgKtm4Q94JJCmWh9n9s26AA1pjVrs2ryrd1vUQuq:8LNrrixg6Kp6yvm4J1W7e51Hs2q

Score

N/A

Malware Config

Signatures

Files

eb9c82a6535be47af73a5458010c00b7549d48d97a23438924c72395c128231c
.exe windows x86

6fddcb44a29a0dacf3580c5bb79b6a90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWow64DirectoryA
ReadConsoleInputExW
GetConsoleMode
CreateToolhelp32Snapshot
CreatePipe
Process32Next
GetDriveTypeA
GetCommProperties
VirtualUnlock
RegisterWowBaseHandlers
GetVolumeNameForVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE