542b58aa4e1b7760687568976985db8353bc0b59977f4a255e885ffb2b8c1ed3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

542b58aa4e1b7760687568976985db8353bc0b59977f4a255e885ffb2b8c1ed3
Size

112KB
MD5

7e1796704024c7a81dd253c7bdabc4d0
SHA1

f9c9f6f4ca77941ad5e1d400ba49c2cc31402104
SHA256

542b58aa4e1b7760687568976985db8353bc0b59977f4a255e885ffb2b8c1ed3
SHA512

adc0a0d87c07243feca2b6c2e48bee371fb8127f044dcbab8f13891507f1d2590bf6ac5f16f88fc7c71123f1c2ce209ba5dbc6c375d289a2bb608fb28493a5f2
SSDEEP

3072:0MWZILS+pMx45lZ9/IhdXoZQSavhEfT/Z:01kR7NgWQhmT/Z

Score

N/A

Malware Config

Signatures

Files

542b58aa4e1b7760687568976985db8353bc0b59977f4a255e885ffb2b8c1ed3
.exe windows x86

a49ddce7157ec4415a1908aa7410cf95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
IsValidLocale
CreateNamedPipeW
lstrlenA
GetModuleHandleA
lstrcmpiA
Sleep
FileTimeToLocalFileTime
GetProcessHeap
lstrcmpiA
CreateMailslotA
DeleteFileA
OpenMutexA
GetDriveTypeW
GetStdHandle
GetVolumePathNameW
GetLogicalDriveStringsW
WaitForMultipleObjects
SetLastError
lstrcmpiA
lstrcmpiA
lstrcmpiA
GetModuleFileNameA

scecli

InitializeChangeNotify
SceSysPrep
SceOpenPolicy
DeltaNotify

Sections

.text
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ