eed418767181126b7fd9fbff357b60196dc24a9dd51dd8f0cf51c6dbf6f46646 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eed418767181126b7fd9fbff357b60196dc24a9dd51dd8f0cf51c6dbf6f46646
Size

94KB
MD5

81800e0b28cfdf8a086d9ef83fd0237f
SHA1

200d91af7815fb647a48211d1824bbc02e2b2ef2
SHA256

eed418767181126b7fd9fbff357b60196dc24a9dd51dd8f0cf51c6dbf6f46646
SHA512

4fde8d9f2b7dd69adfd729a217af9cc1befd8190d16d99aeea9a7ac578a7d0c2ebef9f5d13c3a1b81b61b43e0aba1cbc5ea4c57d67c61c2ac8e4d2e15a93f0c4
SSDEEP

1536:fi+sxZDtq8UHktbyG4YWOz3IIQwOqrGBjtzc8YaEJwZK4/83ZoMOALF6SSf:2pq8WK3nFrGBNhZEXtpxLF6H

Score

N/A

Malware Config

Signatures

Files

eed418767181126b7fd9fbff357b60196dc24a9dd51dd8f0cf51c6dbf6f46646
.exe windows x86

42ecf08cc926229765c8371a72d9a188

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrepareTape
CancelTimerQueueTimer
GetTapePosition
ExpandEnvironmentStringsA
ProcessIdToSessionId
GetFileAttributesW
QueueUserAPC
UTUnRegister
BaseCheckAppcompatCache
GetCommConfig
LZRead

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE