85f549075bf3f34621cc9eeb630d54e59408567ff9cf8f733b0e6503b077bc2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85f549075bf3f34621cc9eeb630d54e59408567ff9cf8f733b0e6503b077bc2b
Size

58KB
MD5

1b8d969c24422f8c5760368c195a7210
SHA1

3b265a6289f648e32e3f71596becae8a7f0bac8a
SHA256

85f549075bf3f34621cc9eeb630d54e59408567ff9cf8f733b0e6503b077bc2b
SHA512

01d05691864ec9e3eac0be2b681ca061431caf0ee09292872501b4141ff6cd6331d225ee1393130bac4b2508c86bc77b96d9ec546a331955a20c678ef552da1f
SSDEEP

1536:ogaqW8Sa8ghcZMp34iFu9Ev4swrBWl69rc:ogaqpZAW4iFu9XPH

Score

N/A

Malware Config

Signatures

Files

85f549075bf3f34621cc9eeb630d54e59408567ff9cf8f733b0e6503b077bc2b
.exe windows x86

1528bd8b56ac48774b42d4a491625225

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
DeleteFileA
OpenMutexA
GetModuleHandleA
lstrcmpiA
Sleep
lstrcmpiA
GetDriveTypeW
GetModuleFileNameA
FileTimeToLocalFileTime
lstrcmpiA
lstrcmpiA
GetProcessHeap
GetVolumePathNameA
WaitForMultipleObjects
lstrcmpiA
SetLastError
GetLogicalDriveStringsA
HeapCreate
CreateMailslotA
lstrlenA
IsValidLocale
GetStdHandle

scecli

SceSysPrep
SceOpenPolicy
InitializeChangeNotify
DeltaNotify

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ