603bbc2c2c024883d733fef7ff1ca3b697cdef942078557863376752506774a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

603bbc2c2c024883d733fef7ff1ca3b697cdef942078557863376752506774a1
Size

301KB
MD5

237393155cb1bed862a9cc4f713f5e40
SHA1

34e7d565f5805f9d44cc9916559eff365aadbcc5
SHA256

603bbc2c2c024883d733fef7ff1ca3b697cdef942078557863376752506774a1
SHA512

f4ddf64461728b71e316b6948cfca44e2e365c438d17d674d16929e3a61603304f487abd7f4038dd2b87f162e84f93dbe4d2a03bbf4caa287b400f1a643a8501
SSDEEP

6144:kcctVPdcbBW98GiCq63dGoHjgAymBHXTD9AfjitNdJH41O/7IPdGAezRQ/cHe:qPdcbBO8GA6tG85DBqwH7/7IPs1VQ0+

Score

N/A

Malware Config

Signatures

Files

603bbc2c2c024883d733fef7ff1ca3b697cdef942078557863376752506774a1
.exe windows x86

74f46575a19134a1668b2dd399743026

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
IsValidLocale
lstrcmpiW
lstrcmpiW
lstrlenA
GetProcessHeap
HeapCreate
Sleep
GetCommState
CreateMailslotW
GetVolumePathNameW
GetModuleHandleA
lstrcmpiW
SetLastError
FileTimeToLocalFileTime
GetModuleFileNameA
GetConsoleAliasW
lstrcmpiW
GetStartupInfoA
lstrcmpiW
DeleteFileA
GetLogicalDriveStringsW
CreateNamedPipeW

sqlunirl

_AppendMenu_@16
wsprintf_
AbortSystemShutdown_
_CallMsgFilter_@8

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ