2eb3daee05213b8eed55d36729e6b3c262d24fc9c05ff8689b60c0d26cc384a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eb3daee05213b8eed55d36729e6b3c262d24fc9c05ff8689b60c0d26cc384a2
Size

70KB
MD5

85b7dbce75563384a60f86971f4e6015
SHA1

07a9d129d90e619871f408b203032f487c6c3e8b
SHA256

2eb3daee05213b8eed55d36729e6b3c262d24fc9c05ff8689b60c0d26cc384a2
SHA512

4537866348b1da47becdd48ecddb097e3a3c6ba20fa9903687745c8b9db5662edfcad97733952ac499d6028fc99c4fc504790f09c3e567e585148a567ca15cec
SSDEEP

1536:WJaJIGolEx1Vu1j9SuWotgKWEk65FsUoy8KuvWBWF:EyySuKRmgKYCFvMdDF

Score

N/A

Malware Config

Signatures

Files

2eb3daee05213b8eed55d36729e6b3c262d24fc9c05ff8689b60c0d26cc384a2
.exe windows x86

e4cad79571f441a925ed7129b92ad963

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
GetFullPathNameA
lstrcpyW
TlsGetValue
FindNextVolumeW
DeleteFileA
TlsAlloc
GetNumberFormatA
SetCurrentDirectoryA
lstrlenW
SetConsoleTitleA
VirtualAlloc
GetLocaleInfoW
GetModuleHandleA
lstrcpyW
GetStartupInfoW
TlsAlloc
GetCurrentProcess
lstrcpyW
GetModuleFileNameW
lstrcpyW
CreateEventA
lstrcpyW

untfs

Format
Chkdsk
??0NTFS_BOOT_FILE@@QAE@XZ
FormatEx

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ORPC
Size: 1024B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RDATA
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ