ef2838e47e40c643077ddc8873e3e939c7c4e673b0957e254af339660ffc83ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef2838e47e40c643077ddc8873e3e939c7c4e673b0957e254af339660ffc83ad
Size

71KB
MD5

0738c316cacff8d548d69f80f1fe2750
SHA1

1ca38bd793d765ffc023b464b4b7f8c5a5bf6668
SHA256

ef2838e47e40c643077ddc8873e3e939c7c4e673b0957e254af339660ffc83ad
SHA512

643fc4227e40b155c8e7f83d5d62dd571c27d54ce141e00bdeeec673ff9186cf0e06716563bd228dfc3bbdab61e3ae9112eb6101caa476db7624f2ea6db91f47
SSDEEP

1536:UI2/r2RBLVI20o4lEz/vWh0LWJ0jY+bmn9s:UIxn6/NlEz3Q0LcS/

Score

N/A

Malware Config

Signatures

Files

ef2838e47e40c643077ddc8873e3e939c7c4e673b0957e254af339660ffc83ad
.exe windows x86

d06d4163f8b2a2466f019eed70abf94c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
GetUserGeoID
InterlockedIncrement
HeapUnlock
OutputDebugStringW
SetFileValidData
BaseInitAppcompatCacheSupport
GetProcAddress
GetExitCodeThread
CloseConsoleHandle
ExpungeConsoleCommandHistoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE