7c65f86cd18f3891ab2dc896c7f0e2b524f67367670451e91c7c298426c4c15f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c65f86cd18f3891ab2dc896c7f0e2b524f67367670451e91c7c298426c4c15f
Size

500KB
MD5

6bdfce40d051eb3dfc9c8e069e1f2870
SHA1

601f214cdc1950dfbc692d832e1644e444df32af
SHA256

7c65f86cd18f3891ab2dc896c7f0e2b524f67367670451e91c7c298426c4c15f
SHA512

643bed87771bc5c94c461392711839f5631638f69b9d6925e076701045d58503371d472aeb788532abc8760be9e2dddd9e8286bd495ff5612a4b73eb73ab0fd4
SSDEEP

12288:GRonD6sOvA118sYCkwamja7bcZTrE5FC3elX/XICHMh:4oD6sOv618ErQAsXvICHY

Score

N/A

Malware Config

Signatures

Files

7c65f86cd18f3891ab2dc896c7f0e2b524f67367670451e91c7c298426c4c15f
.exe windows x86

053b9fcc05c988bdf9f38e615e08baab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsA
CreateMailslotA
GetModuleHandleA
GetStdHandle
SetLastError
IsValidLocale
GetDriveTypeW
GetModuleFileNameA
Sleep
WaitForSingleObject
lstrcmpiA
SuspendThread
lstrcmpiA
HeapCreate
GetVolumePathNameA
lstrcmpiA
DeleteFileA
FileTimeToLocalFileTime
CreateNamedPipeA
lstrlenA
lstrcmpiA
lstrcmpiA
GetProcessHeap

riched20

RichEditANSIWndProc
CreateTextServices
IID_IRichEditOle
IID_ITextHost

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 490KB - Virtual size: 490KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sql
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ