ee64a48c6b721b950291706528a0bbba544dc1dd633bcd5fbd17027d32c67ebe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee64a48c6b721b950291706528a0bbba544dc1dd633bcd5fbd17027d32c67ebe
Size

119KB
MD5

f88424f014289d0bfaee204f005c3d6f
SHA1

a52699bf54157da9ccb75f1581c280d89321ccb6
SHA256

ee64a48c6b721b950291706528a0bbba544dc1dd633bcd5fbd17027d32c67ebe
SHA512

6e52e244804b4679ef057ba30ee0c74930a1aedf0294121961cd5de64b6f06c6bae07dae4414cbcc5747a41675ff641430d35e890b9ab28879a6214e97fce1fc
SSDEEP

1536:AxdVc1UjDFgF04mensoSgMWRIPvb0BpXxMNpjVrs2ryrd1vUQuqSSqK5tnCvv:wVfKFTzsoSgMEUj0PGNHs2qxnC

Score

N/A

Malware Config

Signatures

Files

ee64a48c6b721b950291706528a0bbba544dc1dd633bcd5fbd17027d32c67ebe
.exe windows x86

571e72f90fda8c3a7a3544b7f593037d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
IsWow64Process
SetFileValidData
_hread
GetConsoleAliasA
FindResourceA
lstrlen
GetSystemWow64DirectoryA
GetCommProperties
IsDebuggerPresent
CreateDirectoryExA
WriteFileGather

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE