2ef7ca25fa7ee156e3c26404ddd8108840c0cbf307131a03d58e62c412306161 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ef7ca25fa7ee156e3c26404ddd8108840c0cbf307131a03d58e62c412306161
Size

87KB
MD5

9aa9679f5f5cab4fd340b3670d73b81e
SHA1

f6065926d14d0bf67fd215e73d373e31798e4655
SHA256

2ef7ca25fa7ee156e3c26404ddd8108840c0cbf307131a03d58e62c412306161
SHA512

693555f823e9f687fe5ef7c951d17bd26b564443ed8d4bc25aca3a628ffba132e6d6eea92bdcc389bffd83ef3a74f39e9307199a61447f7f280d51fe9b11989b
SSDEEP

1536:OYc0JZF5AIBHHEAJw0/FO4jB4joDXyw3iUGNQxtT82hW8fPL:OYhFb5kAJw0FOkOoDz3iCB8vYL

Score

N/A

Malware Config

Signatures

Files

2ef7ca25fa7ee156e3c26404ddd8108840c0cbf307131a03d58e62c412306161
.exe windows x86

954c02ea22610e8e824625dc9bb4f809

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalWire
InterlockedPushEntrySList
GetCurrentThread
DelayLoadFailureHook
BaseFlushAppcompatCache
GlobalCompact
Process32First
UnregisterWait
GetConsoleAliasA
ResumeThread
InterlockedFlushSList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 31KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE