9e1ddb085a7e49f6c2d33c4f34f71964795d163f228c3f838787d1474306724c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e1ddb085a7e49f6c2d33c4f34f71964795d163f228c3f838787d1474306724c
Size

63KB
MD5

039fb6661d2c7b4c033a86f6ee6d0ad0
SHA1

676da92d85ea92c5e6743a00228b04e997d63c6d
SHA256

9e1ddb085a7e49f6c2d33c4f34f71964795d163f228c3f838787d1474306724c
SHA512

3f865c24697c7e2af7c2237d64d78bc4aae5126b75067ced13aa90f991171660938bbd8c4098f703a7486da6d34b51f43d3ab8177ae3db8280de8e5e4ee22c73
SSDEEP

1536:YxkRTfG1b24dfqb3HmpFKEjXQB6k4mk8:YCRTes4pM3c8Esn4l

Score

N/A

Malware Config

Signatures

Files

9e1ddb085a7e49f6c2d33c4f34f71964795d163f228c3f838787d1474306724c
.exe windows x86

158bd58c9233c7edbc766c012e765c36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetProcessHeap
GetStartupInfoA
lstrcmpiW
GetModuleFileNameA
GetStdHandle
lstrlenA
GetLogicalDriveStringsW
lstrcmpiW
DeleteFileA
lstrcmpiW
GetConsoleAliasW
lstrcmpiW
GetModuleHandleA
CreateNamedPipeW
IsValidLocale
lstrcmpiW
GetCommState
HeapCreate
Sleep
CreateMailslotW
GetVolumePathNameW
FileTimeToLocalFileTime

sqlunirl

_CallMsgFilter_@8
_AppendMenu_@16
wsprintf_
AbortSystemShutdown_

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ