286686dc96ad16a7a5fbc82bf32d7f0b5668da726fa8a0ae276c44e8f033240c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

286686dc96ad16a7a5fbc82bf32d7f0b5668da726fa8a0ae276c44e8f033240c
Size

63KB
MD5

5366b7afbef4c1b02b865324cf022230
SHA1

489dc303d1aae3e0a0b706b1760c9246d6093555
SHA256

286686dc96ad16a7a5fbc82bf32d7f0b5668da726fa8a0ae276c44e8f033240c
SHA512

c2f23e14f6f4b02ef00af268dfdcf690fe17b0c1429c48e772883d1bca8592a7bc6e820f0beae08478ec3110b76817719b1275a1c5497f78fc04636586439e26
SSDEEP

1536:KV74FaljzxBfzbTtEA10Bq2BMoGLUp1qdAmk8:KV7pjNB7bJNuAqMoecqdAl

Score

N/A

Malware Config

Signatures

Files

286686dc96ad16a7a5fbc82bf32d7f0b5668da726fa8a0ae276c44e8f033240c
.exe windows x86

9adc3e8c5233c06ca349bf4877b3906f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeW
lstrcmpiW
GetStdHandle
GetConsoleAliasW
GetModuleHandleA
lstrlenA
lstrcmpiW
lstrcmpiW
DeleteFileA
Sleep
lstrcmpiW
IsValidLocale
lstrcmpiW
GetVolumePathNameW
SetLastError
CreateMailslotW
GetProcessHeap
GetCommState
GetStartupInfoA
HeapCreate
GetLogicalDriveStringsW
GetModuleFileNameA
FileTimeToLocalFileTime

sqlunirl

_AppendMenu_@16
AbortSystemShutdown_
wsprintf_
_CallMsgFilter_@8

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ