52f141ea4b3831a728b43cf384f65dde2389ddae0e3bfa7def238ce581e954fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52f141ea4b3831a728b43cf384f65dde2389ddae0e3bfa7def238ce581e954fd
Size

303KB
MD5

693fb0e402319f2a8a0d0a2e791b8cb1
SHA1

721cad48c888c608c739a0a86452d59b1a411792
SHA256

52f141ea4b3831a728b43cf384f65dde2389ddae0e3bfa7def238ce581e954fd
SHA512

a54649f6e11ec65d1a96262793734eb04dbeecb29c394ddb823d846d2e4eb41df5c297bf904334eae18a92d3b4c4374c8c6613b96f0fa3dd93abea43c4347c43
SSDEEP

6144:xdcbBWP04OtC9agUIyJwO8dvJaHBgSGUWsmNUcB0yU7x:xdcbBH99NzSjBejwjjU

Score

N/A

Malware Config

Signatures

Files

52f141ea4b3831a728b43cf384f65dde2389ddae0e3bfa7def238ce581e954fd
.exe windows x86

fee65daf967a944e3b0fe5ee1bc7097b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
DeleteFileA
GetModuleHandleA
lstrlenW
GetStartupInfoA
lstrcpyA
lstrcpyA
CreateNamedPipeW
GetProcessHeap
FileTimeToLocalFileTime
lstrcpyA
GetCommState
GetLogicalDriveStringsW
GetVolumePathNameW
CreateEventA
GetConsoleAliasW
lstrcpyA
Sleep
HeapCreate
GetStdHandle
IsValidLocale
lstrcpyA
GetModuleFileNameA

sqlunirl

_AppendMenu_@16
AbortSystemShutdown_
_AddAtom_@4
wsprintf_

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ