a1b7e4521c789d2eec24237e3f42dabccaceb4a5ab725bd58989543cd19bc315 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1b7e4521c789d2eec24237e3f42dabccaceb4a5ab725bd58989543cd19bc315
Size

808KB
MD5

9fa6b6204e2849fa26f42a6de0606118
SHA1

f5006add7a3dfdc81ec9b609951502378435917f
SHA256

a1b7e4521c789d2eec24237e3f42dabccaceb4a5ab725bd58989543cd19bc315
SHA512

f22aba7bf215e43dc58b9975d8020d43ad4320a5e7bc90bc6d021ff3017cb7701268157f989f4f7267c86c9202ba53e474c3b950952cfa80e1b1ce1537a8dc0e
SSDEEP

24576:G6F6J4Xzs6KGOOHRJMYDx8xk8DIGQBtzY0l:G6MczlKG/EYtyJDSzY

Score

N/A

Malware Config

Signatures

Files

a1b7e4521c789d2eec24237e3f42dabccaceb4a5ab725bd58989543cd19bc315
.exe windows x86

885ade7161e11414b3bb2c9d0babe5cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsW
SetLastError
lstrcpyW
lstrcpyW
GetStdHandle
GetMailslotInfo
VirtualAllocEx
GetVolumePathNameW
GetProcessHeap
lstrcpyW
CreateEventA
lstrcpyW
FileTimeToLocalFileTime
DeleteFileA
GetLocaleInfoA
LoadLibraryA
GetCommState
lstrlenW
GetStartupInfoA
IsValidLocale
GetModuleFileNameA
GetConsoleAliasW
lstrcpyW

tapi3

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 799KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE