87fec15b6f013236f07f94f25d64982a2b15b1b65e5098ec756dfc4f6c10ded4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87fec15b6f013236f07f94f25d64982a2b15b1b65e5098ec756dfc4f6c10ded4
Size

503KB
MD5

7002b1c8c8f4536ccdfd8c8539e9bd40
SHA1

bb05b519c91f53014c55d2a7240ae52e7e5c080b
SHA256

87fec15b6f013236f07f94f25d64982a2b15b1b65e5098ec756dfc4f6c10ded4
SHA512

8c6556ecc535a30c13ffb7350efeac6eae605da9f9a017650995eef97927c534b332dbdc07f47e0b50e3076d886d6e4d7364cff4c83e6f6f198a0a7f298dc0d3
SSDEEP

12288:gPF6m2fpRPkTk0PFZPIGd1QoaXDo/69K:gPF6m2fpt70jQGbUDY6

Score

N/A

Malware Config

Signatures

Files

87fec15b6f013236f07f94f25d64982a2b15b1b65e5098ec756dfc4f6c10ded4
.exe windows x86

9b02b9573348baa332a4c9a0253a2873

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
lstrcmpiW
GetVolumePathNameW
lstrcmpiW
GetModuleHandleA
GetLogicalDriveStringsW
GetProcessHeap
GetStdHandle
lstrcmpiW
DeleteFileA
GetStartupInfoA
lstrcmpiW
CreateMailslotW
lstrcmpiW
IsValidLocale
SetLastError
lstrlenA
GetConsoleAliasW
GetCommState
Sleep
GetModuleFileNameA
HeapCreate
CreateNamedPipeW

sqlunirl

_CallMsgFilter_@8
AbortSystemShutdown_
_AppendMenu_@16
wsprintf_

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 496KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ