31345ece27a64c8e2d22543b850f4d5a2000a15bdfc700e52eec8c6ed58ea9da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31345ece27a64c8e2d22543b850f4d5a2000a15bdfc700e52eec8c6ed58ea9da
Size

301KB
MD5

3af7032642efcc2a81c30f5d21de79fa
SHA1

2177c888d5ec85780995f531f81b53853c960179
SHA256

31345ece27a64c8e2d22543b850f4d5a2000a15bdfc700e52eec8c6ed58ea9da
SHA512

437a9a275f15951b6374157129253d27cffd74183aa6e8714be3d06066740bdbca46d5c5faf8f597c11c8a129f35c376d68cf4009251855de73ba32e4bf56466
SSDEEP

6144:9MdcbBWFsjxZQPhyi5rO1mfJ7EfLQvUf0osZnIVVVNxYlGJvgTcZeEQXx:9MdcbBfNZ0lrOwhYfL16IDOouTXE0

Score

N/A

Malware Config

Signatures

Files

31345ece27a64c8e2d22543b850f4d5a2000a15bdfc700e52eec8c6ed58ea9da
.exe windows x86

312177f723138e973198692683cd85f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNameW
Sleep
lstrcmpiW
lstrcmpiW
SetLastError
CreateNamedPipeW
GetConsoleAliasA
GetStdHandle
DeleteFileA
GetProcessHeap
IsValidLocale
GetModuleHandleA
lstrcmpiW
FileTimeToLocalFileTime
GetLogicalDriveStringsW
lstrcmpiW
GetStartupInfoA
GetCommState
lstrcmpiW
HeapCreate
CreateMailslotW
lstrlenA
GetModuleFileNameA

scecli

SceSysPrep
InitializeChangeNotify
SceOpenPolicy
DeltaNotify

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ