65a860484135ab08e4fa07c8902d254a1559cb8b62c3ddc40c990ab1de792de1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65a860484135ab08e4fa07c8902d254a1559cb8b62c3ddc40c990ab1de792de1
Size

303KB
MD5

963fa35e501846316affe7de657d5d10
SHA1

6ab906f166b7148afd435d277a1c41f2aa2c9aa6
SHA256

65a860484135ab08e4fa07c8902d254a1559cb8b62c3ddc40c990ab1de792de1
SHA512

7d57b25bf3e2c59325599ce514502c42146ff1d22b0efb0f56a2519a5827562cd4cd9ad1a8592970b577dc685f157db94cb3b9ea081010e17ef2c225ac36fd1d
SSDEEP

6144:913dcbBWWWj+lNmmlzCWkuRhvOYzYhS4lcWKv4DC5eU24Bl9:f3dcbBjlCWVRNEplAgk24B

Score

N/A

Malware Config

Signatures

Files

65a860484135ab08e4fa07c8902d254a1559cb8b62c3ddc40c990ab1de792de1
.exe windows x86

3f6441ef7d548b5f0204055b763f051b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotW
GetStdHandle
SetLastError
Sleep
GetVolumePathNameW
GetCommState
GetProcessHeap
CreateNamedPipeW
lstrcmpiW
DeleteFileA
lstrcmpiW
lstrcmpiW
lstrlenW
GetModuleFileNameA
HeapCreate
lstrcmpiW
IsValidLocale
GetConsoleAliasW
GetLogicalDriveStringsW
lstrcmpiW
FileTimeToLocalFileTime
GetModuleHandleA
GetStartupInfoA

sqlunirl

AbortSystemShutdown_
wsprintf_
_CallMsgFilter_@8
_AppendMenu_@16

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ