118536caf71a494145eba9a40bb84fce496fd6ac078407922427f318db990f07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

118536caf71a494145eba9a40bb84fce496fd6ac078407922427f318db990f07
Size

112KB
MD5

0de703570e1a5573cc69cc9e0833f3fc
SHA1

dc8d81e2a36382fa17cc665433d21063fe2711cd
SHA256

118536caf71a494145eba9a40bb84fce496fd6ac078407922427f318db990f07
SHA512

3b7f0e48c9e147fff6da666e4fd2d7a153d953351045e01e311b2780e28b24c26006b5ca1b7ccf153b366d0237492498414b5b41339f257203bde12cb187ea95
SSDEEP

3072:xdqbNm3yOgQQp7uGufH4oEU0BMY/KzlKBs:fimjE7uvfYkY/E

Score

N/A

Malware Config

Signatures

Files

118536caf71a494145eba9a40bb84fce496fd6ac078407922427f318db990f07
.exe windows x86

88226f4b5ed8298a927b5300924a09b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsFree
SetLastError
GetDriveTypeA
lstrcatW
GetTickCount
ReadFile
GetLastError
GetExitCodeProcess
GetModuleHandleA
GetPrivateProfileStringA
GetLogicalDrives
GetConsoleTitleW
GetBinaryTypeA
lstrcmpiA
FileTimeToLocalFileTime
GetStdHandle
CreateNamedPipeA
IsValidCodePage
GetLocalTime
HeapCreate
EndUpdateResourceA
CreateWaitableTimerA
SetStdHandle

netshell

DllGetClassObject
NcFreeNetconProperties
HrGetIconFromMediaType
HrLaunchConnectionEx

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 1024B - Virtual size: 529B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ