1fcf363c884e5013da67f586562865e7f6b05f5921968b91184be491a2ee327a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fcf363c884e5013da67f586562865e7f6b05f5921968b91184be491a2ee327a
Size

61KB
MD5

76d56c38057f168e15754300bb9acd10
SHA1

c6412e9354ce9d19177ad71742031ccca38f4418
SHA256

1fcf363c884e5013da67f586562865e7f6b05f5921968b91184be491a2ee327a
SHA512

cd686be7674efb7fd7c9b4d0ce975eefa869666f6a87890624213b042dee8c91dd20581be8e73bf71ab554003126494dc0f7ce9896d8d364b6a20083cde167f7
SSDEEP

1536:ZD7rWYSKNizNZ9mR+Jv+ym+rDyAoCLriiosw5E:R76YSKNizNXxJmymuywnoX

Score

N/A

Malware Config

Signatures

Files

1fcf363c884e5013da67f586562865e7f6b05f5921968b91184be491a2ee327a
.exe windows x86

9baaad6c7eab40b2177c3bf6047ffd68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ConnectNamedPipe
CreateEventA
CreateFileA
CreateNamedPipeA
CreateThread
DisconnectNamedPipe
ExitThread
FlushFileBuffers
GetCurrentProcessId
GetCurrentThread
GetExitCodeThread
GetModuleHandleA
ReadFile
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateThread
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WriteFile

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ