ef4736494fe29d7403d85713cf489f957ed48d7f3f125743a0479440a5d5168b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef4736494fe29d7403d85713cf489f957ed48d7f3f125743a0479440a5d5168b
Size

371KB
MD5

4adf144a028b173acbaddac195de7295
SHA1

3dc5047a6469915766f4b62d563a51c5288c7f60
SHA256

ef4736494fe29d7403d85713cf489f957ed48d7f3f125743a0479440a5d5168b
SHA512

080dd54a68512df159fd637b79ab70c036389361de7121662392bd53d480a64e998478e057fee07b1bacb9eaa3fd5837acc541b3fc93184355ca63fb58d20bf6
SSDEEP

6144:4538/4PyJSCKAuHOWJXNJwg+JnXO5OJx1zb4Ly4/3lNC2l9Y8N6F0aZor:osQPWBJSOPLO5OJxx4LjVgstN6NZc

Score

N/A

Malware Config

Signatures

Files

ef4736494fe29d7403d85713cf489f957ed48d7f3f125743a0479440a5d5168b
.exe windows x86

dae2264e721d7c66f7fa35e864d11aba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mini9
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE