ef426e2c06b88a071ff35c450a9882092d0906fa39a6f8910829db6f67dca6ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef426e2c06b88a071ff35c450a9882092d0906fa39a6f8910829db6f67dca6ea
Size

100KB
MD5

0c84decb1f9ffbf47b58885ce7048384
SHA1

e3c758e047123831382741ded9be9f79298d9a98
SHA256

ef426e2c06b88a071ff35c450a9882092d0906fa39a6f8910829db6f67dca6ea
SHA512

d6dfb31bf49aeb1f6d15d2e6d5cd685af89344a8192ddbbab14b9af57f814acb8fa8edd102c3a21f26e25b35c506d94f6eac3c6ddd5ad66860721e7c154b91c0
SSDEEP

1536:Z75wLSBVQ7ud7fqnLgxbD1TMWjHsRGQ/hQlVHXPSe0FVtcfeahdcqgMUcUr:OuhiMxb5TT8GQ0HaBcJcSU1r

Score

N/A

Malware Config

Signatures

Files

ef426e2c06b88a071ff35c450a9882092d0906fa39a6f8910829db6f67dca6ea
.dll windows x86

22863ce3fcb60b6c8c7d44b8da6851da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputA
GetCurrentProcessId
GetConsoleNlsMode
GetFileInformationByHandle
GetSystemInfo
ProcessIdToSessionId
InitAtomTable
GetThreadLocale
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

data
Size: 8KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ