e2fdec962a75cbb86dd0499e364f09294c81385496fbd664718a7ed933bd2151 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2fdec962a75cbb86dd0499e364f09294c81385496fbd664718a7ed933bd2151
Size

119KB
MD5

05e540c392e388021514c398852c5368
SHA1

afda38c66eb5b9529e3c67584db083a6687b0a63
SHA256

e2fdec962a75cbb86dd0499e364f09294c81385496fbd664718a7ed933bd2151
SHA512

9dcfe9a833911ac4e5f46f3af540c3475920a69d269166bb04848a9cffad6d32ea35ada73efbd09babd52fa1bee7ef3cfcd3ecdb0520aecae669ba2fb6391270
SSDEEP

3072:+IodlKf7LKPRPSeuO/6fIrJ/1EpzDmHh3yF:sOE2eEIrJsahCF

Score

N/A

Malware Config

Signatures

Files

e2fdec962a75cbb86dd0499e364f09294c81385496fbd664718a7ed933bd2151
.exe windows x86

637e9e805bea765636f2421085501282

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
VirtualAlloc
GetStringTypeW
DeleteFileA
CreatePipe
DeleteFileA
DeviceIoControl
CreateFileA
GetCurrentDirectoryW
GetModuleHandleW
GetModuleHandleA
CreateEventW
CreateFileMappingW
SetVolumeLabelA
DeleteFileA
WriteConsoleA
CreateSemaphoreW
GetShortPathNameA
CopyFileW
GetProcessHeap
SetEnvironmentVariableA
FatalExit
Sleep

mshtml

DllGetClassObject
PrintHTML
DllCanUnloadNow
ShowModalDialog

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ