ff9056decb1346226845e97cf14d868dccbc886c7d8e36e1201a65b3ef22088f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff9056decb1346226845e97cf14d868dccbc886c7d8e36e1201a65b3ef22088f
Size

303KB
MD5

8cb42e630161cace0ae1200bbc2af2e7
SHA1

237dadc6589b30d9a7614871195737018b4372a2
SHA256

ff9056decb1346226845e97cf14d868dccbc886c7d8e36e1201a65b3ef22088f
SHA512

c171b9790b9c696fc8bc04469e3beeb853637126d3cce4a2628e48cc975e0b24f00ccc0faf35371490e3f040a76a12dccb961efbbaae03a2271bd4c4f74c5a4d
SSDEEP

6144:rfpK6dcbBWpEwQjeFlHc5ZFHZ55cM3E1ZuOV2JrAjv1kSasO23h8H82J:rpK6dcbB4EwDFlHoPHbBGZuA9T/Gck

Score

N/A

Malware Config

Signatures

Files

ff9056decb1346226845e97cf14d868dccbc886c7d8e36e1201a65b3ef22088f
.exe windows x86

984a17a89cd040e0c889fdf37699abad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetConsoleAliasW
GetCommState
CreateEventA
CreateNamedPipeW
FileTimeToLocalFileTime
lstrcpyA
lstrlenW
lstrcpyA
lstrcpyA
HeapCreate
GetProcessHeap
GetStartupInfoA
DeleteFileA
lstrcpyA
SetLastError
GetModuleHandleA
GetModuleFileNameA
lstrcpyA
GetLogicalDriveStringsW
GetVolumePathNameW
Sleep
IsValidLocale

sqlunirl

wsprintf_
_AddAtom_@4
_AppendMenu_@16
AbortSystemShutdown_

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ