18eba23a2a735150d1199c7b529365329c37e13704f6d2e5ab8859b3de237a2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18eba23a2a735150d1199c7b529365329c37e13704f6d2e5ab8859b3de237a2a
Size

320KB
MD5

a0b1db652ab11b25cd3952f3ea267010
SHA1

1bf4489aba9d70212950cea6613000aa8df0ea6c
SHA256

18eba23a2a735150d1199c7b529365329c37e13704f6d2e5ab8859b3de237a2a
SHA512

cb2e3b2179127353a5b5bae33aa8a81807804ef05916f0e99eb37d0a8fd0c5d6020b0de136e4322824b85d394289af368cce419f96ebb60f6c692d16f6e35b6a
SSDEEP

6144:u3oAYQM/LH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:4CQO2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

18eba23a2a735150d1199c7b529365329c37e13704f6d2e5ab8859b3de237a2a
.exe windows x86

ef9561b6ce21032e14b67dfd7437cf58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
CloseHandle
IsBadReadPtr
QueryDepthSList
EnumResourceNamesW
HeapReAlloc
DeleteCriticalSection
CreateHardLinkW
WriteConsoleW
FormatMessageA
BackupSeek
GetComPlusPackageInstallStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE