ef20cffc75254d3fee4be0a73d171a2fa1463656649d172cb6983c17b36a0318 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef20cffc75254d3fee4be0a73d171a2fa1463656649d172cb6983c17b36a0318
Size

62KB
MD5

4f3bdb0993938e239525c3f62bc8716a
SHA1

1ac9ed10b9de39438f280c64cd5b703cf98f8087
SHA256

ef20cffc75254d3fee4be0a73d171a2fa1463656649d172cb6983c17b36a0318
SHA512

0ff83d8b2746ab6c7492b15729f7f6ecac1e69cf992870ee85c6fdfe9e77aaf2fdb9812677540f3487bf0941e2d3593536533c0c11c126048f5013e2ce2b8515
SSDEEP

1536:xIX9qiFAzogAXsfVVzmhq/jYmeVmYxPcLfY1fzSkb7a6QgM:eciOzoH8fV1QqlcP6fW7Sq7a6A

Score

N/A

Malware Config

Signatures

Files

ef20cffc75254d3fee4be0a73d171a2fa1463656649d172cb6983c17b36a0318
.exe windows x86

3630ba92841e05ed700f079eb099be44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
CloseHandle
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
HeapFree
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ