ef2e4da1bfc75e89b9cdcc2d21224fe7d1fecefac141daec0fa891b02731b9ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef2e4da1bfc75e89b9cdcc2d21224fe7d1fecefac141daec0fa891b02731b9ef
Size

96KB
MD5

65f2f3a87668eeafe9b524a18f1e5f30
SHA1

f185c173e371e46918ad63a025e0d095764bc514
SHA256

ef2e4da1bfc75e89b9cdcc2d21224fe7d1fecefac141daec0fa891b02731b9ef
SHA512

41387c7db34e1edcaa4246fa23ca6eb183f121897154a91e545cb5f409cb4e6b2ab3eaddcd6b99530207a55090fb646d34e49cb1e98fbf24b52057855966f58d
SSDEEP

768:a6tsfyQBVFoWnTystQR5osi0UxmIq/6zcFN2OkQ7K5kH1:a6thaoeTttQRmsi0zIc+9eH1

Score

N/A

Malware Config

Signatures

Files

ef2e4da1bfc75e89b9cdcc2d21224fe7d1fecefac141daec0fa891b02731b9ef
.exe windows x86

705cbe71b06353bac3360f8e798fc146

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
FindFirstFileA
LoadLibraryExA
LoadLibraryA
CreateProcessA
WinExec
_lopen
CopyFileA
MoveFileExA
MoveFileA
OpenFile
CreateFileA
GetEnvironmentStringsW
SetHandleCount
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
GetProcAddress
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
FindNextFileA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
WriteFile
LCMapStringA
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

FindExecutableA
ShellExecuteA
ShellExecuteExA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE