ebc56087b39b20f788fc077c2daba3599aa4bfdb4dd2627821f396ab8a6108c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebc56087b39b20f788fc077c2daba3599aa4bfdb4dd2627821f396ab8a6108c3
Size

66KB
MD5

fe67e2c5703092c6b8f3609b3bb5b022
SHA1

26cdef01251ad4ebf1099a0f355555c0684e2cff
SHA256

ebc56087b39b20f788fc077c2daba3599aa4bfdb4dd2627821f396ab8a6108c3
SHA512

4063696ac330999e4e8d314198a17c7ebc38399b8a69470a4622322a417b89200731797238c0b16ecd1c62811fdb53250e87b3d2b0a02fd6044ce5f7af4a2fe8
SSDEEP

1536:DrY+tzIn5j0nCHVMJkmum1o5CSv+vgxXWvuuprYMP0qlw:Nnnwmum1lBX5YMs6

Score

N/A

Malware Config

Signatures

Files

ebc56087b39b20f788fc077c2daba3599aa4bfdb4dd2627821f396ab8a6108c3
.exe windows x86

69dee4e2bd2d3825698e4c277e1cde3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchangeAdd
GetFileType
FileTimeToLocalFileTime
EnumSystemLocalesA
OpenEventW
GetVDMCurrentDirectories
GetConsoleAliasesLengthW
SetConsoleCursorMode
lstrlen
VirtualFreeEx
ActivateActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE