fd272435173c760a897b153f800461b87882bfc44b696c98678320fa248f87d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd272435173c760a897b153f800461b87882bfc44b696c98678320fa248f87d2
Size

111KB
MD5

2c84077018bbfce206d2301599674580
SHA1

7574c4fad4e9dcab9d13ce82d1e2752673226382
SHA256

fd272435173c760a897b153f800461b87882bfc44b696c98678320fa248f87d2
SHA512

9bec34812abee738e549e7e9fb5cbe9a6af8f34b3ac8586aa13dfb116b8312d8d59e9432b837bff7190f25e54dbb5238236ad07e2c1a7d8ef708e31a85608553
SSDEEP

3072:6jjTMqA8L0tZp3S83JY3QXPs6C3eFYeJZegMBrXj+F:6LAnJYCPs6C3eZTe5Zz+F

Score

N/A

Malware Config

Signatures

Files

fd272435173c760a897b153f800461b87882bfc44b696c98678320fa248f87d2
.exe windows x86

801a4713d26be5e33725d32a885c6f18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
lstrlenW
GetCommState
lstrcpyW
GetModuleFileNameA
lstrcpyW
GetMailslotInfo
GetStartupInfoW
lstrcpyW
SetCurrentDirectoryA
lstrcpyW
DeleteFileA
lstrcpyW
GetLocaleInfoA
VirtualAllocEx
GetVolumePathNameW
IsValidLocale
SetConsoleTitleA
GetProcessHeap
GetModuleHandleA
SetLastError
GetStdHandle
FileTimeToLocalFileTime

termmgr

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Pdata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ