44b4178d0737f8470bdc041a7412901a93927e9e868ad45fbb24ad2a8482e3e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44b4178d0737f8470bdc041a7412901a93927e9e868ad45fbb24ad2a8482e3e8
Size

301KB
MD5

3dff42a0e57816968357f4164d643eee
SHA1

48f7674cce3add234cfb21011105e9437939ca67
SHA256

44b4178d0737f8470bdc041a7412901a93927e9e868ad45fbb24ad2a8482e3e8
SHA512

2d6da4a032b7fac721471ff21c202491ddd0c9e89e5b21a21bfb9b407aa2f18b7b4fe31af685158f516d3a9eb89d1ae33328d3f6a391e1bda8161950b5bc5301
SSDEEP

6144:I6YpSdcbBW8WgAEtiw+5E2GWFc6qGnj+SA07Gy/5Ta1N:I6wSdcbBH7id5E2GN6qGnj+Shaypa1N

Score

N/A

Malware Config

Signatures

Files

44b4178d0737f8470bdc041a7412901a93927e9e868ad45fbb24ad2a8482e3e8
.exe windows x86

57e3fda9540d313bb7ed6aff89d2b2d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
GetCommState
lstrcmpiW
GetProcessHeap
IsValidLocale
GetLogicalDriveStringsW
lstrcmpiW
GetVolumePathNameW
GetStartupInfoA
GetModuleFileNameA
lstrlenA
lstrcmpiW
CreateMailslotW
DeleteFileA
GetModuleHandleA
lstrcmpiW
CreateNamedPipeW
HeapCreate
GetStdHandle
SetLastError
Sleep
GetConsoleAliasW
FileTimeToLocalFileTime

sqlunirl

_AppendMenu_@16
AbortSystemShutdown_
wsprintf_
_CallMsgFilter_@8

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ