07efb9dcb28aef9c49930887c7ee19e4ad7f04cada2b8849f57dba694b3b1b7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07efb9dcb28aef9c49930887c7ee19e4ad7f04cada2b8849f57dba694b3b1b7d
Size

58KB
MD5

e44cc6d4a6dd9e644ade5e9e935eb4d4
SHA1

5372691879a5f9aba00279fbfccc86bfed5a8617
SHA256

07efb9dcb28aef9c49930887c7ee19e4ad7f04cada2b8849f57dba694b3b1b7d
SHA512

db98177fcf955b23fc688d2a7a2a7b31dc00d34b663b664cbf4c1891927e99b96f8f94e3f9626027aad9ce4d6f81a98b69d797ebb4bf0ce8c97c61fba01656d9
SSDEEP

768:PNqcKPXv54pBGrGICF24hEVWJfImyTv2Qk+Pp+dSzidXfo3dN+sDwwnD3V4ZDc:PNKXwNF24hEmAK+hqS6fo3dhwuD+ZD

Score

N/A

Malware Config

Signatures

Files

07efb9dcb28aef9c49930887c7ee19e4ad7f04cada2b8849f57dba694b3b1b7d
.exe windows x86

fc5d4f4b0e9f8fd68fc32bbe12109e7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVolumePathNameW
lstrcmpiA
lstrlenA
GetDriveTypeW
DeleteFileA
IsValidLocale
WaitForMultipleObjects
GetModuleFileNameA
OpenMutexA
Sleep
HeapCreate
FileTimeToLocalFileTime
GetProcessHeap
lstrcmpiA
SetLastError
CreateMailslotA
lstrcmpiA
GetLogicalDriveStringsW
lstrcmpiA
GetStdHandle
GetModuleHandleA
CreateNamedPipeW
lstrcmpiA

scecli

SceSysPrep
SceOpenPolicy
InitializeChangeNotify
DeltaNotify

Sections

.text
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ