ef1b7c9e91806a5ee03f1b9c51d1ed202d433a72e7121c1f02a5c2077cd44180 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef1b7c9e91806a5ee03f1b9c51d1ed202d433a72e7121c1f02a5c2077cd44180
Size

320KB
MD5

a21c4270bb9512dea89b9847711edae0
SHA1

eef949742aa03593c4d269705a5ea848abcd1e5c
SHA256

ef1b7c9e91806a5ee03f1b9c51d1ed202d433a72e7121c1f02a5c2077cd44180
SHA512

22d3d88eec144a26872a738d1a7bc0334c268a5cd515d8e722236ff3bc09a3958a6f942f16ab67086367a1115688c9714c067188dc93ac3912627e1246af0b72
SSDEEP

6144:J7KXGH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:J7c82EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

ef1b7c9e91806a5ee03f1b9c51d1ed202d433a72e7121c1f02a5c2077cd44180
.exe windows x86

ab7d148271be535132fa465e8110d34d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadDirectoryChangesW
TrimVirtualBuffer
HeapQueryTagW
CancelDeviceWakeupRequest
LocalCompact
DeleteCriticalSection
GetStartupInfoW
SetCurrentDirectoryW
Module32Next
SetConsoleCP
DosPathToSessionPathA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE