17362a3e9b8246823ecaaa6f4fef33833c6b5758cef24d12a1f39b3bf943a9e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17362a3e9b8246823ecaaa6f4fef33833c6b5758cef24d12a1f39b3bf943a9e6
Size

63KB
MD5

7ad52f9c4b8a67c6feda08e4291354f1
SHA1

d0e9526e310470b82448605b3613dcdb87afb680
SHA256

17362a3e9b8246823ecaaa6f4fef33833c6b5758cef24d12a1f39b3bf943a9e6
SHA512

825e7fdf71c93f57bd8c612fd084ce9985e7fe57bdbbe5e1badd16f32b8f915255c842cb8015058c93ede46340737346bc7497ee255f9616e4d2fb9b5863b3ea
SSDEEP

1536:Vy3mDeVOBFsQEk/BvkfZ7mgZI6x3T9t+9WjFABI+cRy/0VzTka7pmk8:UmDW4FkEvkfZ7/ZIP9G+BIhuJOl

Score

N/A

Malware Config

Signatures

Files

17362a3e9b8246823ecaaa6f4fef33833c6b5758cef24d12a1f39b3bf943a9e6
.exe windows x86

8e7828256333c08829c24de3361e72df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
GetModuleFileNameA
Sleep
DeleteFileA
lstrlenA
GetStdHandle
GetVolumePathNameW
SetLastError
IsValidLocale
GetLogicalDriveStringsW
GetModuleHandleA
lstrcmpiW
HeapCreate
lstrcmpiW
GetCommState
GetStartupInfoA
lstrcmpiW
CreateMailslotW
FileTimeToLocalFileTime
GetProcessHeap
GetConsoleAliasW
lstrcmpiW
CreateNamedPipeW

sqlunirl

AbortSystemShutdown_
_AppendMenu_@16
wsprintf_
_CallMsgFilter_@8

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ