ef8e9ac370b882606ffa2a16f0ece75018e533bfafc7363c436617264add1351 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef8e9ac370b882606ffa2a16f0ece75018e533bfafc7363c436617264add1351
Size

91KB
MD5

639b901143265bf492a8afb526e0111f
SHA1

847531c6c84956f4941c8ca11812226f45966735
SHA256

ef8e9ac370b882606ffa2a16f0ece75018e533bfafc7363c436617264add1351
SHA512

00558a015d8a4d01bdd82e8c00c7ce0ca0fc24c9bfc3d3f5755973b30d52017db26f2cacc4efcd9919f0f37cff281722bf070d7a7a5fae36416c7cbf291571b1
SSDEEP

1536:W71d4meTZH9XnTme17NRBlFotszJHkTALScGH:iH+TZH93qe97BlFoYJHkWIH

Score

N/A

Malware Config

Signatures

Files

ef8e9ac370b882606ffa2a16f0ece75018e533bfafc7363c436617264add1351
.exe windows x86

c2c3462a009ad0ceaa65720bdd74d522

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemCodePagesW
VirtualProtectEx
GetConsoleAliasExesW
GetConsoleDisplayMode
CreateFileMappingA
GetThreadPriority
BaseFlushAppcompatCache
QueueUserWorkItem
IsBadWritePtr
DnsHostnameToComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE