ef470c88a835a76602736d9707e01165f878869d668f7641db2ae48606050226 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef470c88a835a76602736d9707e01165f878869d668f7641db2ae48606050226
Size

58KB
MD5

6eb55d1b761b4054f294160e572b210c
SHA1

e45f2e049736215b7496cd790bdecfe8f57431f6
SHA256

ef470c88a835a76602736d9707e01165f878869d668f7641db2ae48606050226
SHA512

8b805ab79920e05195654d756d9bde172099161356777627975ffba6b2adad530f15b5b3a8444a8a8640f03389aec6873ac43059c7a1e272fe579ce5b131db3f
SSDEEP

1536:fsPOuji+0Ka2lB8QXHVJ6iyW5OlWf/jykZZD:fsPOue+R8I6OfO

Score

N/A

Malware Config

Signatures

Files

ef470c88a835a76602736d9707e01165f878869d668f7641db2ae48606050226
.exe windows x86

cfdf3fc8b1916c0e63e53004b1e38a4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
SetLastError
OpenMutexA
HeapCreate
lstrcmpiA
Sleep
GetModuleHandleA
CreateMailslotA
GetProcessHeap
lstrcmpiA
GetDriveTypeW
lstrcmpiA
lstrcmpiA
GetVolumePathNameW
FileTimeToLocalFileTime
lstrcmpiA
GetModuleFileNameA
CreateNamedPipeW
WaitForMultipleObjects
GetStdHandle
GetLogicalDriveStringsW
lstrlenA
IsValidLocale

scecli

SceOpenPolicy
SceSysPrep
DeltaNotify
InitializeChangeNotify

Sections

.text
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ