ed1772cfa71076b6785463d7f2f30f9e83150dfc6d7e11dc1a4e27792aa242bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed1772cfa71076b6785463d7f2f30f9e83150dfc6d7e11dc1a4e27792aa242bf
Size

320KB
MD5

2d1537bea70ae0fda92f14d565b4ec50
SHA1

52ae4e220ed1fe184f840acb3c47be76db933255
SHA256

ed1772cfa71076b6785463d7f2f30f9e83150dfc6d7e11dc1a4e27792aa242bf
SHA512

93be1ca6d324f1a98e6fdb9d2ad68181eead95e9d0b04f59f10dc7f85c35d6321fd625a7b6c509e4091fe9a37966683925c566f4fbbc98dee968c33c2f544597
SSDEEP

6144:yrmkrJBNH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:yJrft2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

ed1772cfa71076b6785463d7f2f30f9e83150dfc6d7e11dc1a4e27792aa242bf
.exe windows x86

f79631b3c4c6567d584a1e2553169d9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WTSGetActiveConsoleSessionId
QueueUserWorkItem
SetCalendarInfoA
AddLocalAlternateComputerNameW
SetFileAttributesW
ConvertFiberToThread
GetCalendarInfoA
DosPathToSessionPathA
GetGeoInfoA
SystemTimeToFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE