ecb46f0564468b154e911d7d23047f92bc5351b32b72951ae9b71549a8708343 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecb46f0564468b154e911d7d23047f92bc5351b32b72951ae9b71549a8708343
Size

76KB
MD5

4e2ae5d6e6cf31bd60113490c99f010f
SHA1

5fb607c077a68e90fd7ae642b7363e9427bc0efc
SHA256

ecb46f0564468b154e911d7d23047f92bc5351b32b72951ae9b71549a8708343
SHA512

8adcdab578419b07c710e2fb1f145bb3ec6235c15379b3207423c7b520eee20790d81f511f418971a681c180291358310fb6cd4a0e8fe4e2e53253be6af4257e
SSDEEP

1536:1CO/D13b6gSwxOG3oYqGAojYbCHalJo6PzeEc2XNbxyDTimG4Q5rNonR9q1YpjVr:X9Swx7Jq/Nzn9WOmGxBNyq1YHs2qo

Score

N/A

Malware Config

Signatures

Files

ecb46f0564468b154e911d7d23047f92bc5351b32b72951ae9b71549a8708343
.exe windows x86

6d39dcd51fd523825cca3d407797c09a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaHighestNodeNumber
WinExec
FlushInstructionCache
ContinueDebugEvent
WriteConsoleOutputW
SetProcessShutdownParameters
GetBinaryTypeW
Module32NextW
FindFirstVolumeW
GetVolumeNameForVolumeMountPointA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE