efe0ac2a095d34114b0d67d6cf6d97963ebc9b5e2ad2f66947271b4b823d4808 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efe0ac2a095d34114b0d67d6cf6d97963ebc9b5e2ad2f66947271b4b823d4808
Size

58KB
MD5

7a31b90ab20e43278d05c24d23bbbb60
SHA1

6fefa7fd06c295f39df578484fb7388ae6e85f2d
SHA256

efe0ac2a095d34114b0d67d6cf6d97963ebc9b5e2ad2f66947271b4b823d4808
SHA512

3fa499277aafc64248d247bac27b9a84ed25be832795787288411ac3d72f5acd646147bfd2a637e88223c7e03fb4b8dcf97bbd69305b077d08359ca284a35b0a
SSDEEP

1536:OpCPC/evhcE/XF2G/6M2uHMb4UQtd8JeHJe3e/1N/ZD:OSmmvF16SMau4pegX

Score

N/A

Malware Config

Signatures

Files

efe0ac2a095d34114b0d67d6cf6d97963ebc9b5e2ad2f66947271b4b823d4808
.exe windows x86

8b62970d2c686f63e369b14db1bbec71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsW
lstrcmpiA
GetModuleFileNameA
OpenMutexA
Sleep
GetProcessHeap
IsValidLocale
GetVolumePathNameW
lstrlenA
lstrcmpiA
HeapCreate
GetDriveTypeW
lstrcmpiA
SetLastError
CreateNamedPipeW
GetModuleHandleA
GetStdHandle
FileTimeToLocalFileTime
lstrcmpiA
DeleteFileA
WaitForMultipleObjects
CreateMailslotA
lstrcmpiA

scecli

SceOpenPolicy
SceSysPrep
InitializeChangeNotify
DeltaNotify

Sections

.text
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ