fc4240edd7c7e73db7946c7c505d3f457edef32f3eb879b2ce9cec61ed01310e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc4240edd7c7e73db7946c7c505d3f457edef32f3eb879b2ce9cec61ed01310e
Size

58KB
MD5

406966ed7e01551c44038397b472c9b0
SHA1

262dcb3fe5c964375a020c478418bfc404429d82
SHA256

fc4240edd7c7e73db7946c7c505d3f457edef32f3eb879b2ce9cec61ed01310e
SHA512

fc0037907af0b9a30438202e113b024f89570111f45e580a72b2dab3f34ae8cb30a556d670cbd64654429bf07d5c89a651db312090c9f131a885cd59f1d86e7f
SSDEEP

1536:LchCuCXNAZFFJpwfNduZvtaY/MxiU938lJaTapj3l:LchT6NsjJGuZvt+xinlJ3pj3

Score

N/A

Malware Config

Signatures

Files

fc4240edd7c7e73db7946c7c505d3f457edef32f3eb879b2ce9cec61ed01310e
.exe windows x86

d8690bc6f6a591849e50c1c2f2624671

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasW
GetProcessHeap
lstrcpyA
CreateEventA
lstrcpyA
GetVolumePathNameW
lstrcpyA
LoadLibraryA
DeleteFileA
GetCommState
GetStartupInfoA
GetStdHandle
lstrcpyA
CreateNamedPipeW
SetLastError
VirtualAllocEx
FileTimeToLocalFileTime
GetModuleFileNameA
lstrcpyA
Sleep
lstrlenW
GetLogicalDriveStringsW
IsValidLocale

tapi3

DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE