0fd015ad129dac7c7d7d0e286ae1b53ad11a0860beae89828e74a84ce21be337 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd015ad129dac7c7d7d0e286ae1b53ad11a0860beae89828e74a84ce21be337
Size

303KB
MD5

ff05d09ead8e92813decaf87384e53c3
SHA1

1cd3456267083ef1076d2681902e3a9cffa8bca2
SHA256

0fd015ad129dac7c7d7d0e286ae1b53ad11a0860beae89828e74a84ce21be337
SHA512

0aaab02671f40879c7850bbe21835f4079cd07f4fbed17e0994617ad6d25a598b226e0e4c0aa93485721a2aecd022e9fc06604e413b08be24638c22a1c7a8047
SSDEEP

6144:nxm+dcbBWWl03Ep7hv5kVrso478+UiQcecnoucva:U+dcbBjmUp5kVrst1

Score

N/A

Malware Config

Signatures

Files

0fd015ad129dac7c7d7d0e286ae1b53ad11a0860beae89828e74a84ce21be337
.exe windows x86

715a41c1b5714d1f14eb6855e1e861a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
HeapCreate
DeleteFileA
Sleep
CreateNamedPipeW
GetStdHandle
SetLastError
lstrcmpiW
IsValidLocale
GetModuleFileNameA
GetCommState
GetConsoleAliasW
GetVolumePathNameW
lstrlenW
GetLogicalDriveStringsW
lstrcmpiW
GetStartupInfoA
lstrcmpiW
CreateMailslotW
FileTimeToLocalFileTime
GetProcessHeap
lstrcmpiW
GetModuleHandleA

sqlunirl

_AppendMenu_@16
_CallMsgFilter_@8
wsprintf_
AbortSystemShutdown_

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ