bec66b376d1add7ec565c6d2c35b8f1f9fd432310465a8425f432426e2f4ed56 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bec66b376d1add7ec565c6d2c35b8f1f9fd432310465a8425f432426e2f4ed56
Size

56KB
MD5

00e178945cb32e5a810d65399d417cbd
SHA1

7659178c17270d1b9ddaa82fca906408cf84bdbc
SHA256

bec66b376d1add7ec565c6d2c35b8f1f9fd432310465a8425f432426e2f4ed56
SHA512

eb71f0fb9ab2be8a65e9c16d5f8d11654dd3b91c5b2cd041a438436c66c79719e4276a7ca499a36509fff4898029e79c194ca3eead00983ff7afc69365162f17
SSDEEP

768:JD5ELsxe3gp+P7MUr5ft1FMBtOXgbkr1D/up3MKbHe7olqtDy9svhIblaMT1Y/Wz:xQgwLAqZD4bw9tDVvhA0/ftSHV5R9

Score

N/A

Malware Config

Signatures

Files

bec66b376d1add7ec565c6d2c35b8f1f9fd432310465a8425f432426e2f4ed56
.exe windows x86

b060e6394428987e6da9cd171afcb87a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCompressedFileSizeW
GetProfileSectionW
ReplaceFileW
SignalObjectAndWait
ReplaceFile
GetSystemWow64DirectoryA
FindFirstVolumeMountPointA
CloseConsoleHandle
ZombifyActCtx
GetExitCodeThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE