a7128a867d193804e65c392d7e6f11952385d0b673602ae91be30431c1654cad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7128a867d193804e65c392d7e6f11952385d0b673602ae91be30431c1654cad
Size

76KB
MD5

ae93a6f9a9b48b07c809b800496a7af8
SHA1

b03581e7cb7d50d793cbb81f2fe0f40bef410e2e
SHA256

a7128a867d193804e65c392d7e6f11952385d0b673602ae91be30431c1654cad
SHA512

98869435d39697c2fd9029b76078f01c91857efa439da3931e4aef0f24c7caab28e58b54ed35664d14c5a7bf19ed7a92964e50bdf14bc1bfe2b07adffd411941
SSDEEP

1536:5rrrQ0p6o57Z/XezyHINenF3cnFY4pt+pjVrs2ryrd1vUQuq6:5rrrQ0p6o57Z/X2UJnFMwHs2qo

Score

N/A

Malware Config

Signatures

Files

a7128a867d193804e65c392d7e6f11952385d0b673602ae91be30431c1654cad
.exe windows x86

c91b7199743dd4f79041c90286ed05b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeW
FatalAppExitW
FindFirstVolumeW
ValidateLCType
SetEvent
GetModuleFileNameA
lstrlen
CreateNamedPipeW
IsBadStringPtrA
CreateThread
GetStartupInfoA
GetSystemDefaultLCID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE