4c75d2659c554013879cf04163607ea9a8e39dba7dd858c895f4a2174072e5f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c75d2659c554013879cf04163607ea9a8e39dba7dd858c895f4a2174072e5f6
Size

55KB
MD5

9ce3136fefc3e2f574e89a355aa94270
SHA1

0bc8dca995ab91e869a00f600bdc78f330775294
SHA256

4c75d2659c554013879cf04163607ea9a8e39dba7dd858c895f4a2174072e5f6
SHA512

ec08dded46e365ed158cdffe34f85c1c65daf7ef49eeddea5c2f535750092bb3c10d3ce3b7fd811435ee0dafc0dee1945e330f0c77b90d9d987e47bdb8524df2
SSDEEP

1536:Tnmhuluhv16jMEFh7CHt8OCaoVuZTJh5ObBXFNfGEmL:jeughvzEFh7UrCzGJhkbpFRGE

Score

N/A

Malware Config

Signatures

Files

4c75d2659c554013879cf04163607ea9a8e39dba7dd858c895f4a2174072e5f6
.exe windows x86

397f99e6f7e8e52dc76e0a18bffcf10a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
lstrcmpiW
lstrcmpiW
GetCommState
Sleep
GetLogicalDriveStringsW
SetLastError
GetVolumePathNameW
GetStdHandle
CreateMailslotW
DeleteFileA
lstrcmpiW
GetModuleHandleA
GetModuleFileNameA
FileTimeToLocalFileTime
IsValidLocale
GetConsoleAliasA
lstrcmpiW
CreateNamedPipeW
HeapCreate
lstrlenA
lstrcmpiW
GetProcessHeap

sqlunirl

_CallMsgFilter_@8
AbortSystemShutdown_
_AppendMenu_@16
wsprintf_

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ