c700291fa8b2a9a1b005327c0347ada5d3a08b4fbe8a9ba7a0f11352319d63b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c700291fa8b2a9a1b005327c0347ada5d3a08b4fbe8a9ba7a0f11352319d63b5
Size

64KB
MD5

0af0d7d85c6847e288150d447c02e2e0
SHA1

cd3bd4828640d897a5f09c4425240860bb958c27
SHA256

c700291fa8b2a9a1b005327c0347ada5d3a08b4fbe8a9ba7a0f11352319d63b5
SHA512

34605aecd4a49914190157fd0a65ae9b538b3264427e4af1cecd66477cbf44244f739f6ece0799fc8e80f8ae6bbd351c432ea033a624239d023fe9b56f183353
SSDEEP

1536:c35w7P/+jU5bQIP8UWe1Y9K1jAH8EAyoCvs75JoAg/BdIpcZX:c35w/WCQxUWYRjAH8EADQK5JopBd

Score

N/A

Malware Config

Signatures

Files

c700291fa8b2a9a1b005327c0347ada5d3a08b4fbe8a9ba7a0f11352319d63b5
.exe windows x86

cc78fef3f09ceaae04b46954a5447dcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
lstrcmpiA
lstrcmpiA
DeleteFileA
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
OpenMutexA
GetProcessHeap
SetLastError
GetDriveTypeW
Sleep
IsValidLocale
lstrlenA
GetLogicalDriveStringsW
WaitForMultipleObjects
lstrcmpiA
CreateMailslotA
FileTimeToLocalFileTime
lstrcmpiA
CreateNamedPipeW
lstrcmpiA
GetVolumePathNameW

scecli

SceSysPrep
DeltaNotify
InitializeChangeNotify
SceOpenPolicy

Sections

.text
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ