6c54d125ff8100e81990b5fee9e723eeac833d6db832e2d860736a660b7dd21a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c54d125ff8100e81990b5fee9e723eeac833d6db832e2d860736a660b7dd21a
Size

55KB
MD5

977b6c919257d8c879c6fd91ddb48200
SHA1

818e72c82b26a2ab96ec2d7b762b0b5c842d2386
SHA256

6c54d125ff8100e81990b5fee9e723eeac833d6db832e2d860736a660b7dd21a
SHA512

9a3667fd4521658fc36852213c77c0efdb818ad82cefda8c5de56039bb9131b8f78b288e15c5ed471d50555aabdc402ecc33fc143679e67e96da163f8df294d3
SSDEEP

1536:yTy4Yj/v611tHEE05vU7LlHQ999RPgPaPSdQFEpmL:yGd3611tHOvm5Q5ReaPYQFEp

Score

N/A

Malware Config

Signatures

Files

6c54d125ff8100e81990b5fee9e723eeac833d6db832e2d860736a660b7dd21a
.exe windows x86

09532e146ae708bb04a8c3ebc5a11cb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsW
GetProcessHeap
GetStdHandle
SetLastError
GetStartupInfoA
CreateNamedPipeW
GetConsoleAliasA
lstrlenA
lstrcmpiW
GetModuleFileNameA
DeleteFileA
HeapCreate
lstrcmpiW
FileTimeToLocalFileTime
IsValidLocale
lstrcmpiW
lstrcmpiW
GetVolumePathNameW
CreateMailslotW
GetModuleHandleA
lstrcmpiW
Sleep
GetCommState

sqlunirl

_CallMsgFilter_@8
wsprintf_
AbortSystemShutdown_
_AppendMenu_@16

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ