31d49ff6fa436b0b9118ed564808b056d84057cc757276af16f0dbb46a915dd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31d49ff6fa436b0b9118ed564808b056d84057cc757276af16f0dbb46a915dd6
Size

298KB
MD5

56a26b87f1d197b669febe8f3174aaec
SHA1

df79d30cc88a6ba312c3fbd34de6b7c22682fa35
SHA256

31d49ff6fa436b0b9118ed564808b056d84057cc757276af16f0dbb46a915dd6
SHA512

97c80b606cb1d1749e98471596fd2499559b2229b3f35c89c853133ed366fb3505115f31395319fc35a1d96b8b10b0e4a7d0c321c318720597c7fbfa57ab6a4f
SSDEEP

6144:bIuRSJbs43VOOS2lvQ2Z4eMM1nlHoBBlHmL:bDG9g2lQqeMnebe

Score

N/A

Malware Config

Signatures

Files

31d49ff6fa436b0b9118ed564808b056d84057cc757276af16f0dbb46a915dd6
.exe windows x86

28bfc3c08fd88b339940b4120bab0a59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetModuleHandleA
FileTimeToLocalFileTime
lstrlenA
GetLogicalDriveStringsA
GetVolumePathNameA
CreateMailslotA
lstrcmpiA
lstrcmpiA
CreateNamedPipeA
GetModuleFileNameA
GetDriveTypeW
HeapCreate
lstrcmpiA
SetLastError
GetStdHandle
GetProcessHeap
lstrcmpiA
IsValidLocale
DeleteFileA
lstrcmpiA
Sleep
SuspendThread

riched20

CreateTextServices
RichEditANSIWndProc
IID_IRichEditOle
IID_ITextHost

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rts
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ