ec895973df8f34328c1438d4ac100a5f1198b403ab0f718a78de232b7d8d0e77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec895973df8f34328c1438d4ac100a5f1198b403ab0f718a78de232b7d8d0e77
Size

62KB
MD5

6a0aaa1a82f1f8b29c4015646092113a
SHA1

a9d845d3ea5fc11b0260fa96ff4fa7fe6d223828
SHA256

ec895973df8f34328c1438d4ac100a5f1198b403ab0f718a78de232b7d8d0e77
SHA512

b9674e34d808f0d88b093067d5bb58c8c30018bfec8d2f36089bd2c5691856c0e85a3cf7e2b9208b6dcb816ecf1760c03923cccd8a435a72aabafed88f81d071
SSDEEP

1536:RK0D5p5ZxwXGoZNIWIme/x9X5lj8vdOLE7q/7OkD:RKijWZNs9plPE2akD

Score

N/A

Malware Config

Signatures

Files

ec895973df8f34328c1438d4ac100a5f1198b403ab0f718a78de232b7d8d0e77
.exe windows x86

f7da9abbd7b4f6acbfc5db29ef740c55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeaps
SleepEx
GetDevicePowerState
GlobalAddAtomW
DeleteVolumeMountPointW
lstrcatW
FormatMessageW
CreateIoCompletionPort
GetPrivateProfileSectionNamesA
UnregisterWait
QueryDosDeviceA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE