ecdf5046995986301fa761070ef5c3042cc78c7814d946604a826424d736990d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecdf5046995986301fa761070ef5c3042cc78c7814d946604a826424d736990d
Size

60KB
MD5

f500ec3857bd0f443010145c69f97fdc
SHA1

d5dc76bdae2404f730d9b1e4f34ffe9a838442ec
SHA256

ecdf5046995986301fa761070ef5c3042cc78c7814d946604a826424d736990d
SHA512

87d7186e394492b4cdb1b2fca28241f409758f46b42d791796d1c02cf8d9ef5bf0aabdc79b91a3e4057c04027b6fa476ae6001188a34df5874fdd791e9da1321
SSDEEP

768:u71FFoJ8E/wG6B0oPy29B8WtBgfSl/12tS9eRugkMtXBWsD/edeE5:u71FFoJLfa66tsSld2tS9eutMtRjJC

Score

N/A

Malware Config

Signatures

Files

ecdf5046995986301fa761070ef5c3042cc78c7814d946604a826424d736990d
.exe windows x86

5e86ce7d57e5a4b4ac2e74194d9a9d53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect
LockResource
LoadResource
SizeofResource
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ