4ea9f9823904f2129e9457994036e5c9c445b80edbb75fb0209f99235b0bc4ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ea9f9823904f2129e9457994036e5c9c445b80edbb75fb0209f99235b0bc4ce
Size

301KB
MD5

26b0cfe3417f83a2813e8ee83f20a8ba
SHA1

65cc6dbceef53bbc93f41c8f68e9f57c89ec9e59
SHA256

4ea9f9823904f2129e9457994036e5c9c445b80edbb75fb0209f99235b0bc4ce
SHA512

724c7bc95cbde43d92f35da644b78c62370a8f2e2894916950b037384f5f96e517b413bf4dfc4cb46f804794e118bd60a06137bd7f71b4f450cfd669c4fdcf64
SSDEEP

6144:5QdcbBW3e2mzxVDRFRE3fHBFkuHLfm3wYSqm2SLTnq3i:CdcbBB2cx93a3fhTHLu3vm2ti

Score

N/A

Malware Config

Signatures

Files

4ea9f9823904f2129e9457994036e5c9c445b80edbb75fb0209f99235b0bc4ce
.exe windows x86

eca368eeb965f3aaf791eeb9ed50a564

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
GetLogicalDriveStringsW
HeapCreate
GetVolumePathNameW
CreateNamedPipeW
CreateMailslotW
GetStartupInfoA
lstrcmpiW
DeleteFileA
lstrcmpiW
GetStdHandle
GetConsoleAliasW
lstrcmpiW
GetCommState
GetModuleHandleA
IsValidLocale
Sleep
lstrlenA
GetProcessHeap
SetLastError
GetModuleFileNameA
FileTimeToLocalFileTime
lstrcmpiW

sqlunirl

_CallMsgFilter_@8
AbortSystemShutdown_
wsprintf_
_AppendMenu_@16

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ