a2713b001eb5e51af77028c9a476bd7d6066ee751a659ab35b848a5a6591c074 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2713b001eb5e51af77028c9a476bd7d6066ee751a659ab35b848a5a6591c074
Size

301KB
MD5

1fc405b1f78ba24b6bdf4f0c62a73bf0
SHA1

57737745a17f2876f44bbdb4579c248db7b137a6
SHA256

a2713b001eb5e51af77028c9a476bd7d6066ee751a659ab35b848a5a6591c074
SHA512

861fb3dcf30b474f1290a9b99410311a3c590ecafcd99bfa60ba85808b99d9f784a0e8c79a8bc76374b321dc7b1585e0f8a166e804fb0d1ce3ff1473adde3b3e
SSDEEP

6144:44BGlvjFdcbBWJtEK/JJDxQHCz+gE2C/AGcpIJph67XdoP0OfT9ARvhyGH:/8JjFdcbB4EK/JJ1vz+F9/zpsrOFYhd

Score

N/A

Malware Config

Signatures

Files

a2713b001eb5e51af77028c9a476bd7d6066ee751a659ab35b848a5a6591c074
.exe windows x86

4b2e5ae2facc4a2edb7f1856d6b24fe0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetCommState
lstrlenA
CreateMailslotW
HeapCreate
SetLastError
GetModuleHandleA
CreateNamedPipeW
Sleep
GetConsoleAliasW
lstrcmpiW
IsValidLocale
GetStdHandle
GetLogicalDriveStringsW
GetProcessHeap
FileTimeToLocalFileTime
lstrcmpiW
GetModuleFileNameA
GetStartupInfoA
lstrcmpiW
lstrcmpiW
lstrcmpiW
GetVolumePathNameW

sqlunirl

wsprintf_
AbortSystemShutdown_
_CallMsgFilter_@8
_AppendMenu_@16

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ