edbee0860dd9ec06c868b142110ce29167ad6766c9e1f16461df9009bc6baa0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edbee0860dd9ec06c868b142110ce29167ad6766c9e1f16461df9009bc6baa0d
Size

42KB
MD5

4f99931c992f98e96e954fcb19c3f2d0
SHA1

757aa5dc965c751534bad9434ae707ad32694202
SHA256

edbee0860dd9ec06c868b142110ce29167ad6766c9e1f16461df9009bc6baa0d
SHA512

84a9bb6b0c3bf843aadc14cf91da69cd9ce324d72b50c983635709ad94fe5f13c3fbe18d1b7f44c691baddaeca40e4082e402d2ec2551a26786184edd7d87a70
SSDEEP

768:GQ/pS8YzXBdVVgz7aSPReR/ZC95/mE2CGWqhZQkAxdHGHd8cBUOpDB4W533EGV/C:GQgFrPEz7pp2RC95/YlLQkqmZvpOW5nM

Score

N/A

Malware Config

Signatures

Files

edbee0860dd9ec06c868b142110ce29167ad6766c9e1f16461df9009bc6baa0d
.exe windows x86

92009019dee90696f2364d47b68ae436

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalW
CreateFileW
ExitProcess
GetFileSize
GetModuleFileNameW
GetThreadContext
GlobalAlloc
ReadFile
ResumeThread
VirtualAllocEx

ntdll

NtSetContextThread
NtWriteVirtualMemory
ZwUnmapViewOfSection

Sections

.text
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE