ebf659396141c960348e44b1553a951aa74fbf33da38fbd056bcb339db4e1647 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebf659396141c960348e44b1553a951aa74fbf33da38fbd056bcb339db4e1647
Size

71KB
MD5

8b5f7cb09608232d60527cf5481ed396
SHA1

30a663cc7ab32688cb95dd1f139e4409ab3d2dce
SHA256

ebf659396141c960348e44b1553a951aa74fbf33da38fbd056bcb339db4e1647
SHA512

84214e42da64ba148ac3e41ac9c80ec94587f3a4d84524e14e2960c50085b3ef27ae91db39f550e48c3cb0a5657f84305af53592445c188c7098eb47fbc867b2
SSDEEP

1536:CuWoS+MYmDLGpa8+LBgRh1bW+99qdFXNMUkAwyTUHHfXTbWgw84Cva:C0S+Frp8BGdwdfMpAGHC

Score

N/A

Malware Config

Signatures

Files

ebf659396141c960348e44b1553a951aa74fbf33da38fbd056bcb339db4e1647
.exe windows x86

e18c56a457e9b64cff39d382a1fdaeb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
CmdBatNotification
ExitProcess
GetConsoleMode
BackupSeek
CreateSocketHandle
SetComPlusPackageInstallStatus
HeapUnlock
GetTapeParameters
GetConsoleCommandHistoryLengthA
LockResource

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE