ba5592866c415219930da0245858003e9b7ce1f5a65ce88f66f2b8299ac09714 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba5592866c415219930da0245858003e9b7ce1f5a65ce88f66f2b8299ac09714
Size

303KB
MD5

5447f9c2f7b9f162d6e1f43c5a617513
SHA1

08d4c42e5198f3aceb0c2c166652f690283c9bac
SHA256

ba5592866c415219930da0245858003e9b7ce1f5a65ce88f66f2b8299ac09714
SHA512

9b999d0ac8b8b73c6e12266bbe602f80f6a6090783ed719ac24be9431fffe9c47cd795acaddceafff62105bda09252b67e8ffb5cabf59bbfbeb6b7f3bb1b2e14
SSDEEP

6144:N+dcbBWw4IGKyfQxyufEjxDjjfTZqOiv4ejdHqUxQ7iIGlxq:4dcbBkKyfvu8FDXb0v43UHIGl

Score

N/A

Malware Config

Signatures

Files

ba5592866c415219930da0245858003e9b7ce1f5a65ce88f66f2b8299ac09714
.exe windows x86

e9d4f56b0c321933496873081c073d52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeW
lstrcpyA
GetProcessHeap
GetCommState
lstrlenW
GetStartupInfoA
LoadLibraryA
lstrcpyA
SetLastError
GetLogicalDriveStringsW
lstrcpyA
DeleteFileA
CreateEventA
lstrcpyA
GetVolumePathNameW
GetConsoleAliasW
FileTimeToLocalFileTime
GetModuleFileNameA
GetStdHandle
VirtualAllocEx
lstrcpyA
Sleep
IsValidLocale

tapi3

DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE