81c575bf17d005dd956ca474c0b558df2b56c0ca6668338b1450e7257ac61c7a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81c575bf17d005dd956ca474c0b558df2b56c0ca6668338b1450e7257ac61c7a
Size

320KB
MD5

a1252d19e0d525db49da87c94062ecd0
SHA1

276509faf00d8e27d92e26221d5fa5fe3c5e66eb
SHA256

81c575bf17d005dd956ca474c0b558df2b56c0ca6668338b1450e7257ac61c7a
SHA512

f991f10d2953a6a8333db88fb2bf525bd161c3eeadf6f9330219bd1926a2a3167b752a0f32ce48db4b2b46e0217a3facabf8a51a5ec499e56ca7e9ed40c3cac7
SSDEEP

6144:U0wK0HiJVtPH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:U0wPi12EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

81c575bf17d005dd956ca474c0b558df2b56c0ca6668338b1450e7257ac61c7a
.exe windows x86

1e32e0fce6ae805a09f6016820c99cfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisconnectNamedPipe
GetFileAttributesW
CallNamedPipeW
FoldStringW
lstrcmpiW
CreateDirectoryExA
HeapUsage
RtlFillMemory
DnsHostnameToComputerNameA
SetMailslotInfo
WaitForSingleObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE