9afb44da45ddfc71cb0c45273f169f8def2f8c095073d9aa22f3f85ca105bb8c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9afb44da45ddfc71cb0c45273f169f8def2f8c095073d9aa22f3f85ca105bb8c
Size

111KB
MD5

2603d6964d4204a947a0534348210420
SHA1

a3f779a96b8da07e7a384c4742f0e70dad44982e
SHA256

9afb44da45ddfc71cb0c45273f169f8def2f8c095073d9aa22f3f85ca105bb8c
SHA512

d72b9904d7e1fd2517c8cee650a35e289140d778c319bd39cbce2008bc15785e87e4be41a362769191d2816be73b73bf18599ebd571f06112eaf4bd6135e6386
SSDEEP

1536:E3A6gHsjodz4YqxsnIkGP0/X5O3PmbzjcwbTTb0RtpELxy4S9yRdGKmmQovVKWlP:x6SbZqFkGQxIGazKNxKWl10Y

Score

N/A

Malware Config

Signatures

Files

9afb44da45ddfc71cb0c45273f169f8def2f8c095073d9aa22f3f85ca105bb8c
.exe windows x86

31faa79cf5bedc95528ebcc5c3baf11e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
CreateNamedPipeW
IsValidLocale
SetLastError
GetConsoleAliasW
GetProcessHeap
lstrcmpiW
lstrcmpiW
CreateMailslotW
lstrcmpiW
lstrcmpiW
GetVolumePathNameW
DeleteFileA
GetModuleHandleA
Sleep
HeapCreate
GetLogicalDriveStringsW
lstrlenW
FileTimeToLocalFileTime
GetStartupInfoA
GetCommState
GetModuleFileNameA
GetStdHandle

sqlunirl

AbortSystemShutdown_
wsprintf_
_CallMsgFilter_@8
_AppendMenu_@16

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ