20b97b707a29ed0362d5ba2675b3bfc70022eab6f1c22609e1ccdaf72abee05c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

20b97b707a29ed0362d5ba2675b3bfc70022eab6f1c22609e1ccdaf72abee05c
Size

116KB
MD5

2042055b2cd46bd39406b0e18a980310
SHA1

d3d5bddd437ac89dc6ee3de6514abb4062ca0f61
SHA256

20b97b707a29ed0362d5ba2675b3bfc70022eab6f1c22609e1ccdaf72abee05c
SHA512

a7348a8ff226cafee3f219fbc9972ed775bbbde34d682aa3534e5b5466f00ee486d69441f75f5054a407edeb231a80ecdc5ada06faed8e8564ca1c8e368132cd
SSDEEP

3072:26lpe8AwNl+mJIXraC2gXCKQuC/221ulBkb:rr0wNls7llXHQuE22e

Score

N/A

Malware Config

Signatures

Files

20b97b707a29ed0362d5ba2675b3bfc70022eab6f1c22609e1ccdaf72abee05c
.exe windows x86

98e68ee48ab1b16579ba81a2e5df121d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
DeleteFileA
GetModuleHandleA
GetLogicalDriveStringsW
CreateNamedPipeW
lstrcmpiW
GetConsoleAliasA
GetVolumePathNameW
IsValidLocale
GetCommState
GetModuleFileNameA
lstrlenA
GetProcessHeap
CreateMailslotW
FileTimeToLocalFileTime
GetStartupInfoA
lstrcmpiW
lstrcmpiW
lstrcmpiW
GetStdHandle
SetLastError
lstrcmpiW
Sleep

sqlunirl

AbortSystemShutdown_
wsprintf_
_CallMsgFilter_@8
_AppendMenu_@16

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ