38c49ad5c2c674521c86605a1efcf76af2398147ea05a730421083d2d2a54a7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38c49ad5c2c674521c86605a1efcf76af2398147ea05a730421083d2d2a54a7c
Size

301KB
MD5

3028cd122505ae5fd47653e1d6edfce0
SHA1

fccb938eb7b69c834eb6aa780139a54573220279
SHA256

38c49ad5c2c674521c86605a1efcf76af2398147ea05a730421083d2d2a54a7c
SHA512

5498db6dff13088c8dac9d34eaf1af142d9a34c559e0755440c5893426bff3a6a126e2c29d2664fb595fcbe4288bd258d0577709ef726470ed3734b3dd546e66
SSDEEP

6144:3/JNdcbBWFYKXBID6YlxZqkSL5nM4Uw+4zHHOsZEfQn5v/QewVbI:3PdcbBw9BfYLVO5MV4zOsZcQRK

Score

N/A

Malware Config

Signatures

Files

38c49ad5c2c674521c86605a1efcf76af2398147ea05a730421083d2d2a54a7c
.exe windows x86

0681e2008446a91bb4be2281f7212f6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotW
HeapCreate
GetModuleHandleA
CreateNamedPipeW
lstrcmpiW
GetStdHandle
SetLastError
GetCommState
Sleep
GetVolumePathNameW
lstrlenA
FileTimeToLocalFileTime
lstrcmpiW
GetLogicalDriveStringsW
GetModuleFileNameA
IsValidLocale
DeleteFileA
lstrcmpiW
lstrcmpiW
GetStartupInfoA
GetProcessHeap
GetConsoleAliasA
lstrcmpiW

scecli

DeltaNotify
InitializeChangeNotify
SceSysPrep
SceOpenPolicy

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ