4c8221ae5dca197e07f632c658aba055a852f715a66e625fa6b5377fefa46444 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c8221ae5dca197e07f632c658aba055a852f715a66e625fa6b5377fefa46444
Size

301KB
MD5

224f4583675acf451a5ebfeda6b18d90
SHA1

90234e259b6d91dd922af7b5d63a0fc07a242571
SHA256

4c8221ae5dca197e07f632c658aba055a852f715a66e625fa6b5377fefa46444
SHA512

e2a99f2f9606107bd7f73c53b0651d79c95d100ce28bd445e83a5aaa61b465aa33bfa9068e1d8612304420affb27df05905964042a7082b97d182fab69e191a7
SSDEEP

6144:XuRUxGVrojyC3t8Bib8Lp/L5U5Ipo+j7cmB49uZquOeTgln2dHC:AUxaEjv+ibChNQ+jlSuCIpC

Score

N/A

Malware Config

Signatures

Files

4c8221ae5dca197e07f632c658aba055a852f715a66e625fa6b5377fefa46444
.exe windows x86

9576d90eee9b4e011343386247fd8cfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeW
GetLogicalDriveStringsW
CreateNamedPipeW
OpenMutexA
CreateMailslotW
GetModuleHandleA
DeleteFileA
lstrlenA
lstrcmpiW
IsValidLocale
Sleep
WaitForMultipleObjects
GetProcessHeap
GetModuleFileNameA
lstrcmpiW
lstrcmpiW
SetLastError
GetStdHandle
lstrcmpiW
lstrcmpiW
FileTimeToLocalFileTime
HeapCreate
GetVolumePathNameW

scecli

DeltaNotify
InitializeChangeNotify
SceOpenPolicy
SceSysPrep

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ