aedd6bf41375a99313aa6ddaada04fd24c19d1da27c43353b4c8b4c0c522de99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aedd6bf41375a99313aa6ddaada04fd24c19d1da27c43353b4c8b4c0c522de99
Size

55KB
MD5

9ebba2ae19ef731de60a5b9d922c6340
SHA1

205ff52ef6234646bc434d7c3effb1ffcf08da67
SHA256

aedd6bf41375a99313aa6ddaada04fd24c19d1da27c43353b4c8b4c0c522de99
SHA512

eb23384fca7b59eb1d6d14461f65c15e87081c365387c4151f530eaa538b78f7d94ba26d564ad5dbf7844f3fb05b2bb633c7e20970583dd702e956d1f833787e
SSDEEP

1536:d5FWTVhPZpzFFh7CHt8OCaoVuZTJh5ObBXFNfGEmb:d5UhxFFFh7UrCzGJhkbpFRGE

Score

N/A

Malware Config

Signatures

Files

aedd6bf41375a99313aa6ddaada04fd24c19d1da27c43353b4c8b4c0c522de99
.exe windows x86

33e8ee905f9a63488f2722bfc60f1d1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeW
GetModuleHandleA
lstrcmpiW
GetLogicalDriveStringsW
GetProcessHeap
Sleep
GetVolumePathNameW
HeapCreate
SetLastError
lstrlenA
CreateMailslotW
FileTimeToLocalFileTime
GetConsoleAliasW
GetStartupInfoA
GetModuleFileNameA
lstrcmpiW
lstrcmpiW
IsValidLocale
lstrcmpiW
lstrcmpiW
DeleteFileA
GetCommState
GetStdHandle

sqlunirl

wsprintf_
AbortSystemShutdown_
_CallMsgFilter_@8
_AppendMenu_@16

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ