f58e17f71597b539605ec7a155eb53b4ada1df8430dddb4fa4c6972d3bdc98db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f58e17f71597b539605ec7a155eb53b4ada1df8430dddb4fa4c6972d3bdc98db
Size

58KB
MD5

22ee60859dcb244a76337ff2cea3352c
SHA1

eb495c0db267310f530d02bffbca6d293d2b4dfb
SHA256

f58e17f71597b539605ec7a155eb53b4ada1df8430dddb4fa4c6972d3bdc98db
SHA512

53ac6633eae81fffbc4b76d34cef0ec4cfd0527bd4f4dabaa492b3f50812d34a0376f59dc30e6d3108d667885846674cb55bcd74c9c6d99ac21a4b6750b1a714
SSDEEP

1536:GhQIOdJaohBF3s4Ir/p6jb1CYRAjiAcHZD:GhIa/ybD6W

Score

N/A

Malware Config

Signatures

Files

f58e17f71597b539605ec7a155eb53b4ada1df8430dddb4fa4c6972d3bdc98db
.exe windows x86

5c642e4e1e5ac2723282af833f9c4e73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
GetProcessHeap
Sleep
FileTimeToLocalFileTime
lstrlenA
IsValidLocale
lstrcmpiA
DeleteFileA
lstrcmpiA
GetModuleFileNameA
GetDriveTypeW
SetLastError
lstrcmpiA
GetModuleHandleA
HeapCreate
CreateMailslotA
lstrcmpiA
GetVolumePathNameW
OpenMutexA
lstrcmpiA
GetStdHandle
CreateNamedPipeW
GetLogicalDriveStringsW

scecli

SceOpenPolicy
InitializeChangeNotify
SceSysPrep
DeltaNotify

Sections

.text
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ