8ec12df3250b92e6c4d9226548183716adbb85ef4f27e67ad61cede9218233c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ec12df3250b92e6c4d9226548183716adbb85ef4f27e67ad61cede9218233c0
Size

62KB
MD5

74fb6053a01f3bf6302215ac31f55a72
SHA1

64cb495ee15adc93ccc229672edc109eaad0b4b3
SHA256

8ec12df3250b92e6c4d9226548183716adbb85ef4f27e67ad61cede9218233c0
SHA512

d65674cde80dbc1787d5314fe06ff321db36a53bb95711a471e633c422287a6fcb43b39f9a6b83a5c7574c88487c5a5b12ddbe42212fdbde1f7c1790d69b1151
SSDEEP

1536:X88Nq7Z4MwyBy5uTpUnrNV7AYxiQ7zO52Fd89+N:s8g7ZNBTipV7Au7sUg6

Score

N/A

Malware Config

Signatures

Files

8ec12df3250b92e6c4d9226548183716adbb85ef4f27e67ad61cede9218233c0
.exe windows x86

fbe76e04416f2ea87214183f20c0fb76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GenerateConsoleCtrlEvent
ReplaceFile
Toolhelp32ReadProcessMemory
ConvertFiberToThread
Module32Next
WriteConsoleOutputCharacterA
GetNumaAvailableMemory
SetFileShortNameW
_lopen

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE