a290c1eb784b439a650369b004fc677f05209d23d51c6781ae23f86e40e00363 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a290c1eb784b439a650369b004fc677f05209d23d51c6781ae23f86e40e00363
Size

58KB
MD5

18ca5259669b0e9bc25c43f8ebe61360
SHA1

86f9c1396c10b75ed5a862a5ba2c95888d20a4d8
SHA256

a290c1eb784b439a650369b004fc677f05209d23d51c6781ae23f86e40e00363
SHA512

aadb9e89f27f92ae1d9efa9a3d59082d668ed675a0ed4a501de6a8b9478f99c97c38216a0a3f5c9c5ed742d4db0c07c7ece1fba0c63db1bb711efbc353c2e101
SSDEEP

1536:KKwTngIldFf5QlwVFIiVqG+20Fm7KwajgxGwf/Fnz:KdgIldFxQxiVqG+2mY7acxGs/J

Score

N/A

Malware Config

Signatures

Files

a290c1eb784b439a650369b004fc677f05209d23d51c6781ae23f86e40e00363
.exe windows x86

644e131eb77ce9b5a5ac80eff234aa72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
DeleteFileA
lstrcpyW
lstrcpyW
lstrcpyW
GetMailslotInfo
GetStdHandle
GetProcessHeap
GetLocaleInfoA
GetModuleFileNameA
lstrlenW
GetCommState
SetConsoleTitleA
CreateEventA
GetStartupInfoW
VirtualAllocEx
GetModuleHandleA
IsValidLocale
lstrcpyW
FileTimeToLocalFileTime
SetCurrentDirectoryA
GetVolumePathNameW
SetLastError

termmgr

DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Pdata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ