2ab3931b119fc6f75e29b0077b829858aaafb3ecb0a6801aa7887562753e9299 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ab3931b119fc6f75e29b0077b829858aaafb3ecb0a6801aa7887562753e9299
Size

504KB
MD5

606ed20794762a62dcf1728dea8838f0
SHA1

27fa0074e03f923304158a975f93554221519210
SHA256

2ab3931b119fc6f75e29b0077b829858aaafb3ecb0a6801aa7887562753e9299
SHA512

0b3054999fccd775b35d352b9acb6b7e7ffa808cc98d3b48a5800af2782e6ef75a8d89b94892b9e993cc1c845bde0e1c9df033bfd43453394fd792d77d303b56
SSDEEP

12288:6YsSF6m2fpRPkTk0PFZPIGd1QoaXDo/69K:BF6m2fpt70jQGbUDY6

Score

N/A

Malware Config

Signatures

Files

2ab3931b119fc6f75e29b0077b829858aaafb3ecb0a6801aa7887562753e9299
.exe windows x86

9c6efd038b33e8088f44bae7249dcb49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetConsoleAliasW
lstrlenA
lstrcmpiW
lstrcmpiW
GetLogicalDriveStringsW
IsValidLocale
GetStdHandle
GetVolumePathNameW
CreateNamedPipeW
GetModuleHandleA
GetCommState
GetStartupInfoA
DeleteFileA
lstrcmpiW
HeapCreate
FileTimeToLocalFileTime
lstrcmpiW
Sleep
GetProcessHeap
GetModuleFileNameA
lstrcmpiW
CreateMailslotW

sqlunirl

AbortSystemShutdown_
_AppendMenu_@16
_CallMsgFilter_@8
wsprintf_

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 496KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ