222cd3b9018fcc30a821fb33179f3862c255e8e7a5a413c90c620ce8c0ac4ad0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

222cd3b9018fcc30a821fb33179f3862c255e8e7a5a413c90c620ce8c0ac4ad0
Size

303KB
MD5

242cfca9b99d3759aa2d1b2dd75a981c
SHA1

74290512c709994f72fb86b0e867b89ec58a0677
SHA256

222cd3b9018fcc30a821fb33179f3862c255e8e7a5a413c90c620ce8c0ac4ad0
SHA512

6da90ee4f044e1716e926f7472becdc44b43eb14d553dde6e92b99312bb6542c76ace06934d86e8e7c38f1e44dd1fc165459adf2a430e23aea36b7c5e091739f
SSDEEP

6144:Ype53dcbBWyKY0yP+Y8pGlUS3qq1S8Lv6wgXRBRcrxibXFqTGUqo+:b3dcbBhx5+tpGd3N08LCHBMx4XF+G+

Score

N/A

Malware Config

Signatures

Files

222cd3b9018fcc30a821fb33179f3862c255e8e7a5a413c90c620ce8c0ac4ad0
.exe windows x86

85839669652e6f55f8497b924aa80cfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
lstrcpyW
GetLogicalDriveStringsW
DeleteFileA
GetProcessHeap
GetCommState
IsValidLocale
GetModuleFileNameA
GetConsoleAliasW
lstrcpyW
FileTimeToLocalFileTime
lstrcpyW
LoadLibraryA
VirtualAllocEx
CreateEventA
GetVolumePathNameW
GetMailslotInfo
GetStdHandle
lstrlenW
GetLocaleInfoA
lstrcpyW
lstrcpyW
SetLastError

tapi3

DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ADATA
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE