4bf35ea871998f82d7039971def44241a23f6a8faeacf970d4b2531afefd421b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bf35ea871998f82d7039971def44241a23f6a8faeacf970d4b2531afefd421b
Size

55KB
MD5

10d0f3a26839e6962881b0bd571776e0
SHA1

a1d7aaa5a4e44bb69ae7a0b4d62fe0ce9d87b30b
SHA256

4bf35ea871998f82d7039971def44241a23f6a8faeacf970d4b2531afefd421b
SHA512

fc03ebfaad38d239aed92c09144e5010bacbbf145f229023fc9b080d0036c98fb5a96e8b4dd1886619097f647539002b446567aa3369a7ee3bac2e080773da75
SSDEEP

768:oSeXET9jqE6E+x9zGYi/tj0xlWLcdf+d8+kp71Qz6kBZjt2SYeiNv8fEdrmLc:ohETdDt+vzZkahp+PkpREBNESedrmL

Score

N/A

Malware Config

Signatures

Files

4bf35ea871998f82d7039971def44241a23f6a8faeacf970d4b2531afefd421b
.exe windows x86

7b38a4118a2cbc9a59da9b370a64bd18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
lstrcmpiW
GetLogicalDriveStringsW
IsValidLocale
DeleteFileA
GetVolumePathNameW
CreateNamedPipeW
GetCommState
GetConsoleAliasA
SetLastError
GetProcessHeap
GetModuleFileNameA
HeapCreate
lstrcmpiW
GetModuleHandleA
lstrcmpiW
CreateMailslotW
lstrlenA
lstrcmpiW
lstrcmpiW
Sleep
GetStdHandle
GetStartupInfoA

sqlunirl

wsprintf_
_AppendMenu_@16
_CallMsgFilter_@8
AbortSystemShutdown_

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ