ef7db84f08eba71ab07e09c8a3e48b6b8e38d4fea5599d2c6901a490384c78f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef7db84f08eba71ab07e09c8a3e48b6b8e38d4fea5599d2c6901a490384c78f7
Size

296KB
MD5

5efb261ae90a7762f8667838b8264fc1
SHA1

ca7edb02404413ab7afc9b7f7e260ceff2e2feea
SHA256

ef7db84f08eba71ab07e09c8a3e48b6b8e38d4fea5599d2c6901a490384c78f7
SHA512

d6f4b050c17da25e80170800a68199eaceac2e86e65788025c7547ea4975cd8cf1964240a48a3293adeed2bc2042ab9719e4676b1ce9573fd46943e3a4cf97b2
SSDEEP

6144:hf/BuzrDXP3PHBfP3HLp3PHJbbbbbbbANrO/AdB97qiuRPgzKOYoOp9HIMe599U0:h5uzrD/3PHBfP3HLp3PHJbbbbbbboO/Q

Score

N/A

Malware Config

Signatures

Files

ef7db84f08eba71ab07e09c8a3e48b6b8e38d4fea5599d2c6901a490384c78f7
.exe windows x86

e5aa088fa6c4649dd8612aa016f4a87a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

InterlockedDecrement
FindResourceA
CloseHandle
ReadFileEx
lstrcatW
ReadConsoleA
GetPrivateProfileIntA
HeapCreate
SetEnvironmentVariableA
HeapReAlloc
DeviceIoControl
Heap32First
GetLastError
lstrcpyW
VirtualQuery
InterlockedIncrement
GetStringTypeW
GetDiskFreeSpaceA
CreateEventW
LoadLibraryA
GetDiskFreeSpaceA

adsldpc

ADsCloseSearchHandle
ADsEnumAttributes
ADsExecuteSearch
ADsDeleteClassDefinition

uxtheme

GetWindowTheme
DrawThemeBackground
GetThemeTextMetrics
CloseThemeData
DrawThemeEdge
GetThemeSysSize
GetThemeBool
SetWindowTheme
GetThemeColor
OpenThemeData
CloseThemeData
GetThemeTextExtent
IsThemeActive
SetWindowTheme

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ