a1ee64376b1f71e5067ba429e9f7d76c9e033a64fa0dc0c008d52e0a74a059fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1ee64376b1f71e5067ba429e9f7d76c9e033a64fa0dc0c008d52e0a74a059fc
Size

94KB
MD5

fe0164d1a7a380c3c087fd2955bc20ab
SHA1

11bf4b8ea417148cd2082272427230ef53183752
SHA256

a1ee64376b1f71e5067ba429e9f7d76c9e033a64fa0dc0c008d52e0a74a059fc
SHA512

a92bd3bfb760840a0252ae69294d8758e98199e0812d3d5be907d65bc4a1ab95dfd090196e91ac0c87265e5bc62e13f843f5dacb63f4233342bd3a4f263f759c
SSDEEP

1536:TL+Wf75BllM1vauUUQXC3IKHPgdyoWwK9ETyoc8YaEJwZK4/83ZoMOALF6SSf:+WD/llmvau/QXUPSFK9wyohZEXtpxLFU

Score

N/A

Malware Config

Signatures

Files

a1ee64376b1f71e5067ba429e9f7d76c9e033a64fa0dc0c008d52e0a74a059fc
.exe windows x86

8efd2c37fec88ff01f1b5d0246e26c05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupSeek
CreateDirectoryExW
DebugActiveProcessStop
SetFirmwareEnvironmentVariableW
CreateHardLinkA
GetDriveTypeA
DebugBreak
CreateConsoleScreenBuffer
RegisterConsoleVDM
SetStdHandle
WritePrivateProfileStructA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE