02b458e05e1b6bf20b45dcdb01b4651f0ac59988518428322b34b5ce50d9fedb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02b458e05e1b6bf20b45dcdb01b4651f0ac59988518428322b34b5ce50d9fedb
Size

58KB
MD5

21feba8dfaf644ffe73e90fa736fd9f5
SHA1

128d061f4e5dbad4d0a08b9d2969185704fe54a4
SHA256

02b458e05e1b6bf20b45dcdb01b4651f0ac59988518428322b34b5ce50d9fedb
SHA512

996a9d3f8d06ef6c87a89e42ed44cedd34b3bced3c2a2ac5cb35d9ff32771139a066fb4c0100601aa87e504b424f0de1febe77f590dd8361f0f5c6d7ae756bff
SSDEEP

1536:6sw0tGI5Eab/e0c9lh0lGG43xM5BqzVqwJie:Nw30Eoek2xMb

Score

N/A

Malware Config

Signatures

Files

02b458e05e1b6bf20b45dcdb01b4651f0ac59988518428322b34b5ce50d9fedb
.exe windows x86

df2b27b0e65c6601da23bb5c845b9e89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNameA
Sleep
SuspendThread
FileTimeToLocalFileTime
CreateNamedPipeA
GetModuleHandleA
lstrcmpiA
GetStdHandle
HeapCreate
GetLogicalDriveStringsA
lstrcmpiA
WaitForSingleObject
SetLastError
lstrcmpiA
lstrcmpiA
DeleteFileA
GetModuleFileNameA
lstrcmpiA
IsValidLocale
GetProcessHeap
lstrlenA
GetDriveTypeW
CreateMailslotA

rastls

DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rts
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ