ef803f09c98a14661d53ebd1caa60a6369b503f3a15c48cfe45051bb639cc6a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef803f09c98a14661d53ebd1caa60a6369b503f3a15c48cfe45051bb639cc6a6
Size

375KB
MD5

0ddfbb653abc6ba60d78aa6082170fef
SHA1

52493f1ae4a47c8351b5b01e456447358c9c5e66
SHA256

ef803f09c98a14661d53ebd1caa60a6369b503f3a15c48cfe45051bb639cc6a6
SHA512

0ad8967a5b9bf59efc58c1e1ecc13278ff7b5495ca313223a8bf8fe298703c692f7a40f8e1ff050dcf812a22b848090b1a3a28e646c2433a65349be49f452608
SSDEEP

6144:g+FPmzqTD92MAhidoU9NmcRK20gXY8BEo0nQPwbWZ5Y3R:gOPDTDEOoqmHoEo0nQYbk5Y3R

Score

N/A

Malware Config

Signatures

Files

ef803f09c98a14661d53ebd1caa60a6369b503f3a15c48cfe45051bb639cc6a6
.exe windows x86

a794bbb7a400a12a67d7708c35df1192

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetFileSize
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile
lstrcatA
lstrcpyA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE