e2c18e8dd223b21f6862d8b27e86fcbd632ef5a0775de7f6d684065d95de768b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2c18e8dd223b21f6862d8b27e86fcbd632ef5a0775de7f6d684065d95de768b
Size

320KB
MD5

a19bb67b74e98fdd19ff15096cde8a30
SHA1

3e8b3dabfb13b2aea7668e48c9684ae488461977
SHA256

e2c18e8dd223b21f6862d8b27e86fcbd632ef5a0775de7f6d684065d95de768b
SHA512

c6f49696524d2e06ccb01fbaf2b0e6e7245608e4c41a1a8419aaf98439f53f8997b50700525f14bf653cc571939276d6223d9123b0bee987b0d4561a937ed452
SSDEEP

6144:PCO1/f+Q0drLfH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:PCAf+vdnP2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

e2c18e8dd223b21f6862d8b27e86fcbd632ef5a0775de7f6d684065d95de768b
.exe windows x86

e1ab42c2761fe67e2caa6f4ec7582c5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_hread
GetModuleHandleW
GlobalUnlock
ZombifyActCtx
FindVolumeMountPointClose
ReadConsoleW
DisconnectNamedPipe
CopyFileW
GetConsoleInputWaitHandle
SetDefaultCommConfigW
GlobalWire
SetConsoleOutputCP

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE