efb82a46ce213f5ca48a317973e2cfe20b3f74f4c52c12596594cd74a05e841e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efb82a46ce213f5ca48a317973e2cfe20b3f74f4c52c12596594cd74a05e841e
Size

61KB
MD5

6e6d0fa51b447c5af8ce2e1a03c073e0
SHA1

a23bdd194a4e6bedc5958ede4803d7239b99b77f
SHA256

efb82a46ce213f5ca48a317973e2cfe20b3f74f4c52c12596594cd74a05e841e
SHA512

738611d7e63313459b86aa6cb1cce16e2ec7ab7173bbb9c85c03aac7cabff4da39a70bf3cb7d1917f1a129ef5034e2b7c6ba1920a0658525a2f6c9faa881c960
SSDEEP

1536:+Vaay2J0bsaq4YzuFIadlJKVnj2QRZs5PgNWzS3+:d2J0wxMFIclsVnj2Qns5Pa+

Score

N/A

Malware Config

Signatures

Files

efb82a46ce213f5ca48a317973e2cfe20b3f74f4c52c12596594cd74a05e841e
.exe windows x86

52fc5c9c2f353cee062cc8e631810051

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFileEx
ExitProcess
lstrcpyA
RaiseException
SwitchToFiber
RemoveDirectoryW
VerLanguageNameW
Heap32ListNext
GetFileAttributesW
DeleteTimerQueueEx
GetConsoleInputExeNameA
GetDevicePowerState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE