ed300ea2a3d1ffdbe41febbf4e7ed49c025851f5dcf54e7b91d58604a6430c6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed300ea2a3d1ffdbe41febbf4e7ed49c025851f5dcf54e7b91d58604a6430c6c
Size

505KB
MD5

4809ae999c89554537119d56cbc2f313
SHA1

3839838049ff8d6aa349201cad2c41d9ddcfcd32
SHA256

ed300ea2a3d1ffdbe41febbf4e7ed49c025851f5dcf54e7b91d58604a6430c6c
SHA512

c3e97b57d8cfb6b2ca9572538252c73976b67cbc93f5e5f8b8310459ad5796544ca32eef77c213ebbb11b3bcb2f25b1732c950028c2b97399c19b099a6752372
SSDEEP

12288:F9FDY7vRKvKDuO0gwpvMieYIhSgT5Wsr3Qlkynhl:FneUWuO0gckiBsMlkyh

Score

N/A

Malware Config

Signatures

Files

ed300ea2a3d1ffdbe41febbf4e7ed49c025851f5dcf54e7b91d58604a6430c6c
.exe windows x86

84e64f30a99c17a7e3c8606d59449b16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeA
CloseHandle
CreateSemaphoreA
HeapCreate
CloseHandle
ReadConsoleA
FindFirstVolumeA
GetModuleHandleW
Sleep
GetEnvironmentVariableW
OpenMutexW
WaitForMultipleObjects
GetFullPathNameW
GetDiskFreeSpaceW
CloseHandle
GetCurrentDirectoryA
GetFullPathNameW
GetConsoleMode
GetStringTypeA
GetModuleHandleA
VirtualFree
GetVolumePathNameW
ReleaseSemaphore

dbghelp

ImageNtHeader
FindFileInPath
ImageRvaToVa
ImageRvaToSection

Sections

.text
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.res
Size: 496KB - Virtual size: 996KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE