07cb1d3dc134d6a0f40ab30ae82c8cdc430e5f2a594fdafe2b73dbd1d6ee572f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07cb1d3dc134d6a0f40ab30ae82c8cdc430e5f2a594fdafe2b73dbd1d6ee572f
Size

300KB
MD5

04fca52a70c37834407b2f5af7778de0
SHA1

62f01554831f25393ea4816dc399dc48d9fee32b
SHA256

07cb1d3dc134d6a0f40ab30ae82c8cdc430e5f2a594fdafe2b73dbd1d6ee572f
SHA512

daecfa9f7d5f7f77db79a35a15d06676284fdbb8c4cc7f41ecef4f87eaade76c4440e3302c967fdb6b50e332e93114448245f3aa443c13618d8dcb36ca37b4df
SSDEEP

6144:RtLuRQ+aN2J0vAG+vH86Qj5WyQngrxWd2l8o39D5rI:RWHvJWAjcNjwyQngrxWoKoD8

Score

N/A

Malware Config

Signatures

Files

07cb1d3dc134d6a0f40ab30ae82c8cdc430e5f2a594fdafe2b73dbd1d6ee572f
.exe windows x86

365dce8cc196e5e831bdd279fbfa5b4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
GetDriveTypeW
lstrcmpiA
GetStdHandle
SuspendThread
GetVolumePathNameA
GetProcessHeap
FileTimeToLocalFileTime
GetModuleFileNameA
IsValidLocale
lstrcmpiA
CreateMailslotA
lstrcmpiA
DeleteFileA
lstrlenA
WaitForSingleObject
HeapCreate
Sleep
lstrcmpiA
GetLogicalDriveStringsA
lstrcmpiA
SetLastError
GetModuleHandleA

scecli

DeltaNotify
SceSysPrep
SceOpenPolicy
InitializeChangeNotify

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ