0ebcee9b10982554f8839d49b5c25674a6eccffb36478dddfc483bd5ccb3be72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ebcee9b10982554f8839d49b5c25674a6eccffb36478dddfc483bd5ccb3be72
Size

91KB
MD5

477035db940d6804041fb86f479c0143
SHA1

739074e8207d21c58f33d351e50fbc71665c2392
SHA256

0ebcee9b10982554f8839d49b5c25674a6eccffb36478dddfc483bd5ccb3be72
SHA512

f6a0c40a233a8327f5e0539212714b41d8ecbb70319dd69e7bbd1c8f93c400d1f7f4be6302e25b79886ef78732eb5863fea0b7d3a2ba8632c2b24626ba244d54
SSDEEP

1536:BESFvPz/sGVL2PR12Xx4+YUOkFC6CkLJlSUDIPOLIHzZR5FtvID:BztEGw6x4Pby7SExezt

Score

N/A

Malware Config

Signatures

Files

0ebcee9b10982554f8839d49b5c25674a6eccffb36478dddfc483bd5ccb3be72
.exe windows x86

49aff2f738fccd50f9f6a677c2191632

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExW
HeapCreateTagsW
FlushInstructionCache
GlobalHandle
GetProfileStringW
GetSystemWindowsDirectoryA
VirtualLock
GetNlsSectionName
WritePrivateProfileSectionA
SetFilePointer
WaitNamedPipeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lrdata
Size: 35KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE