e6794737a9f0890a30a8f8808cc526cfdf17b16a61998ddde6b1516a38f62732 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6794737a9f0890a30a8f8808cc526cfdf17b16a61998ddde6b1516a38f62732
Size

58KB
MD5

7154aede21326aa21ce63113bc4f92f9
SHA1

318656cb64613d0519056b97dcdcbb195bc4174c
SHA256

e6794737a9f0890a30a8f8808cc526cfdf17b16a61998ddde6b1516a38f62732
SHA512

417b78c5ff0412c0fd4b3c9c466761eb7e3ed36e203b57ef115199db6087e5356b78fd438d452440a7354e6dcedac8e09a3bfecefd5ea597d1b12d69ad1128d0
SSDEEP

1536:PdDNTtFEym3yAkH4y5raCRtOL3m/OSF1+4Q6FXlM34/cCBMt:XTtFEh3Wraam21+J6FncCB

Score

N/A

Malware Config

Signatures

Files

e6794737a9f0890a30a8f8808cc526cfdf17b16a61998ddde6b1516a38f62732
.exe windows x86

f383257ccb5710c6db2c4dcb01271235

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
CreateMailslotA
IsValidLocale
GetVolumePathNameA
lstrcmpiA
lstrcmpiA
GetLogicalDriveStringsA
GetProcessHeap
GetStdHandle
GetModuleFileNameA
Sleep
lstrcmpiA
SetLastError
OpenMutexA
CreateNamedPipeA
FileTimeToLocalFileTime
GetDriveTypeW
DeleteFileA
WaitForMultipleObjects
lstrcmpiA
lstrcmpiA
lstrlenA
GetModuleHandleA

scecli

InitializeChangeNotify
SceSysPrep
DeltaNotify
SceOpenPolicy

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ