388d1db0b966f44b3b66d0afcb78596686ef0ec9b723572d6d8f9c39d900ee37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

388d1db0b966f44b3b66d0afcb78596686ef0ec9b723572d6d8f9c39d900ee37
Size

121KB
MD5

6c148e8c7e2462ff75efcdbe76aa5e80
SHA1

f9764c83feeb2b9ed217b0e1f683f7fd4ca8496c
SHA256

388d1db0b966f44b3b66d0afcb78596686ef0ec9b723572d6d8f9c39d900ee37
SHA512

4e6d2d5dd8070d1d057a1220f6180945865980014cd8df077235eb519400ad10318ca67f358a98aa02a4e3f7b8021c35caf13b534d612ad7375fc519368b8124
SSDEEP

3072:yDSmjATYD0oIEA+B0E6W/OZBoTQi0WJ4E3C:faoYYvsS+OZBoTQTWJl

Score

N/A

Malware Config

Signatures

Files

388d1db0b966f44b3b66d0afcb78596686ef0ec9b723572d6d8f9c39d900ee37
.exe windows x86

35a4657510c10965240501916295e82f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
Sleep
FileTimeToLocalFileTime
HeapCreate
GetVolumePathNameW
lstrcpyA
CreateEventA
GetModuleFileNameA
lstrcpyA
GetConsoleAliasW
GetLogicalDriveStringsW
GetStartupInfoA
IsValidLocale
SetLastError
GetCommState
GetProcessHeap
GetStdHandle
lstrcpyA
CreateNamedPipeW
lstrcpyA
GetModuleHandleA
lstrcpyA
lstrlenW

sqlunirl

wsprintf_
_AppendMenu_@16
AbortSystemShutdown_
_AddAtom_@4

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ