1ebd76eee0faa6da30e5c795d7a28e49f9998975ad23ab53b2065b8f9546d748 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ebd76eee0faa6da30e5c795d7a28e49f9998975ad23ab53b2065b8f9546d748
Size

320KB
MD5

83d2611d7dbbd036ac742f7245532640
SHA1

13f98a8da035c13376a66e3f6928bcb58ad161a6
SHA256

1ebd76eee0faa6da30e5c795d7a28e49f9998975ad23ab53b2065b8f9546d748
SHA512

67d020440eaf0f2696068cd9d2f229ceea29066190c397703d6994be005c7cf036ccaa5f51127eedb8e286d3b9afb5488ac4981c145b1572c8d369decda22a04
SSDEEP

6144:VM2RIQ4V6JH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:ixV6B2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

1ebd76eee0faa6da30e5c795d7a28e49f9998975ad23ab53b2065b8f9546d748
.exe windows x86

06f3db84ecaec1f1f7c02c0aa32214d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNamedPipeHandleStateA
WriteConsoleW
DeleteVolumeMountPointW
GetLinguistLangSize
EraseTape
Heap32Next
GetEnvironmentStringsA
GetSystemDirectoryW
GetCompressedFileSizeA
FindActCtxSectionStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE