4c2a65f1d8f41c6fd94ec14745dac4b679ee360de9d284258225ec0e2adea739 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c2a65f1d8f41c6fd94ec14745dac4b679ee360de9d284258225ec0e2adea739
Size

121KB
MD5

568edcfbd361823963e81ac173b23f05
SHA1

a7da47a326b544627b85190b22368a04fcb84195
SHA256

4c2a65f1d8f41c6fd94ec14745dac4b679ee360de9d284258225ec0e2adea739
SHA512

6f7fdd6bf0f312de8c006a685b916ac2af424141ca89d3ee6a3ae22ec92dfca9f4dadea5e9c956a01c43fed341cb07265cf85364949ccf630c134f6d695e1d66
SSDEEP

1536:8sKJGhlq5jliFzKOiU4OfMG0TSfluPYi/3VT0IiGsPzshoSKbS1ud+4Lip6RVPE+:8khaliFzKnTSfluB1GzYhqSm+iRVsul

Score

N/A

Malware Config

Signatures

Files

4c2a65f1d8f41c6fd94ec14745dac4b679ee360de9d284258225ec0e2adea739
.exe windows x86

7ef457d12ce49c31febcb0ceef5dcd4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLogicalDriveStringsW
lstrcpyA
GetConsoleAliasW
lstrcpyA
HeapCreate
DeleteFileA
lstrcpyA
CreateNamedPipeW
IsValidLocale
Sleep
lstrlenW
CreateEventA
GetStartupInfoA
lstrcpyA
SetLastError
GetVolumePathNameW
GetProcessHeap
GetModuleFileNameA
FileTimeToLocalFileTime
lstrcpyA
GetCommState
GetStdHandle

sqlunirl

wsprintf_
_AppendMenu_@16
_AddAtom_@4
AbortSystemShutdown_

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ