ea5844af1c5ad56b87aa2f7ec9bc0fbadbcfa994d5e0b8a846967e39c2d747cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea5844af1c5ad56b87aa2f7ec9bc0fbadbcfa994d5e0b8a846967e39c2d747cc
Size

76KB
MD5

9252340b87ba34925179c60ca1e17209
SHA1

7bba46d389c11910fe8abf5b6b3a9eca71443bf3
SHA256

ea5844af1c5ad56b87aa2f7ec9bc0fbadbcfa994d5e0b8a846967e39c2d747cc
SHA512

0154b7a2d9aeccded182e0e86f00bfb2e6ccae1165c2aaa311af501d2ea66cb1e296fe7476a7a2bf78da92b2e7ebf98dbccfe406be90de71d7088350b677ce12
SSDEEP

1536:x9C0u6XYYknqKKBP4H6fpiBLXZOjGpTjEErxTWDTMqhGKYIZTET8x:x9C0u6XZknqHq6ixXZOypTjBkMqhGKZ5

Score

N/A

Malware Config

Signatures

Files

ea5844af1c5ad56b87aa2f7ec9bc0fbadbcfa994d5e0b8a846967e39c2d747cc
.exe windows x86

ff1ac5cd215a36d4cbcc1151b103ae1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupSeek
MoveFileExW
GetFirmwareEnvironmentVariableA
FindVolumeMountPointClose
GetOverlappedResult
RegisterWowExec
LocalShrink
IsWow64Process
RtlMoveMemory
IsWow64Process
SetComputerNameExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE