b24b4a82fb98120f9e64e9a4efb4c70f6e3188aeb51f4c255537e7189eb3fa60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b24b4a82fb98120f9e64e9a4efb4c70f6e3188aeb51f4c255537e7189eb3fa60
Size

806KB
MD5

5d41332ae55c703194034ba35f0832d0
SHA1

ecda985b6fb3d21aa3a135c2ca6ed1e83a716ee1
SHA256

b24b4a82fb98120f9e64e9a4efb4c70f6e3188aeb51f4c255537e7189eb3fa60
SHA512

e422d72d57f53c6afb6d9d4880b0876902c348f4c1759bf11dd5038e3805279e6208711eaf0f1e5e30a778638650f2c29f35615a7e4a5f41020988bb6ab42146
SSDEEP

24576:3wO4Tp6LM2/xEXin1rpT5YWEeU0D4FIqMSl:Z+pm4inTiwCIq3

Score

N/A

Malware Config

Signatures

Files

b24b4a82fb98120f9e64e9a4efb4c70f6e3188aeb51f4c255537e7189eb3fa60
.exe windows x86

572f888783573993269322ddb98e0067

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
CreateEventA
GetCommState
lstrcpyW
GetModuleFileNameA
SetConsoleTitleA
SetLastError
lstrcpyW
FileTimeToLocalFileTime
GetStdHandle
lstrcpyW
GetStartupInfoW
GetProcessHeap
GetLocaleInfoA
IsValidLocale
SetCurrentDirectoryA
VirtualAllocEx
GetModuleHandleA
GetVolumePathNameW
lstrcpyW
DeleteFileA
lstrlenW
GetMailslotInfo

termmgr

DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Pdata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ