6cccf3440feef218dafc39dceea1f4d7fef2b88ac51d9bd13cfc242d915a27bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cccf3440feef218dafc39dceea1f4d7fef2b88ac51d9bd13cfc242d915a27bf
Size

58KB
MD5

e43e6490083e49bacb047153842925d6
SHA1

78193a5414f31a84abfea60085db06a64b8159cc
SHA256

6cccf3440feef218dafc39dceea1f4d7fef2b88ac51d9bd13cfc242d915a27bf
SHA512

20bb9d64d14f0d60a3a77568a78185721ab5fdd91b1e01aadb46b5628a7651880634bef1629c8bd5e89efed720e3913db42f7dce17cabd70cad8b523c65cc02e
SSDEEP

768:er1Qc6NfqlQZipr0a9VumTEP2Ux3WgwiZX8ClKysMn3eCk+gqh4ZDc:D7FqlQZipr0a7AP3xke8C5saHkDBZD

Score

N/A

Malware Config

Signatures

Files

6cccf3440feef218dafc39dceea1f4d7fef2b88ac51d9bd13cfc242d915a27bf
.exe windows x86

0e42a93097a3753c473e29d69a685218

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
CreateMailslotA
GetLogicalDriveStringsW
HeapCreate
SetLastError
FileTimeToLocalFileTime
lstrlenA
GetDriveTypeW
IsValidLocale
lstrcmpiA
CreateNamedPipeW
lstrcmpiA
DeleteFileA
lstrcmpiA
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
Sleep
GetVolumePathNameW
lstrcmpiA
GetStdHandle
OpenMutexA
lstrcmpiA

scecli

SceSysPrep
InitializeChangeNotify
SceOpenPolicy
DeltaNotify

Sections

.text
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ