ec9baac7d7cd99de8b5c14ef5e18de6f372eeb5fb227ef44954e0f9aeb7111a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec9baac7d7cd99de8b5c14ef5e18de6f372eeb5fb227ef44954e0f9aeb7111a5
Size

159KB
MD5

78758152490e9a1cadea30b866caf1a9
SHA1

56c667ce87a7339ea8e1102203aa73e434585980
SHA256

ec9baac7d7cd99de8b5c14ef5e18de6f372eeb5fb227ef44954e0f9aeb7111a5
SHA512

8e6961dfcad63b6918b4db1091079b64f7892acb49ecd2b863f0a3c568844973dd2ef98923df27a8193bc1e9fdd54ae2cffaaf125e9a8c6ed483300623fe48b2
SSDEEP

1536:b9GvcnNcnGHagWcXOyKAh+ICWKVzwgoW3b34XdXv7t3KNV2u/tHPuov05+GDwI+x:bUctPKRoWLY91KNV/th0IWwxD

Score

N/A

Malware Config

Signatures

Files

ec9baac7d7cd99de8b5c14ef5e18de6f372eeb5fb227ef44954e0f9aeb7111a5
.exe windows x86

28aac8e6d8b7fc104465b2f9ce13db95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
GetThreadContext
Sleep
SetStdHandle
ReadFile
SetFilePointer
FlushFileBuffers
GetLastError
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
CloseHandle

user32

GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
PeekMessageA

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ