5d3395cf95b8d1495c99d7331ab0c855eeb498c095525f24509de1b4fd5e3758 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d3395cf95b8d1495c99d7331ab0c855eeb498c095525f24509de1b4fd5e3758
Size

58KB
MD5

0c247eb49daa139428285e75488815c0
SHA1

5c0ab4fa9e8dc3d53d76fa34404dda630df67070
SHA256

5d3395cf95b8d1495c99d7331ab0c855eeb498c095525f24509de1b4fd5e3758
SHA512

f5cbd22312c7f775fb7b4eff53fe5606ee5d4b1774c5b8987a4f1c7af61da3c84911309f4197eb539dca693a78e22bd0c1d82761a85f18ef702ecf68ee3e365e
SSDEEP

768:GpiVIvTD0LW2WDOJeTqz4ojShwO5hL7Zvs/Av6Fu1rGUUmvH6gexuWpQLzNaDk4K:oHvv0MDv+soGqk7hZT1H65VpQ3NWvZD

Score

N/A

Malware Config

Signatures

Files

5d3395cf95b8d1495c99d7331ab0c855eeb498c095525f24509de1b4fd5e3758
.exe windows x86

124e16c9a8509905da791852334f2d62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
SetLastError
GetDriveTypeW
lstrlenA
lstrcmpiA
OpenMutexA
Sleep
lstrcmpiA
GetStdHandle
GetVolumePathNameW
lstrcmpiA
IsValidLocale
GetModuleHandleA
lstrcmpiA
CreateNamedPipeW
CreateMailslotA
GetModuleFileNameA
GetProcessHeap
DeleteFileA
WaitForMultipleObjects
HeapCreate
FileTimeToLocalFileTime
GetLogicalDriveStringsW

scecli

SceSysPrep
DeltaNotify
InitializeChangeNotify
SceOpenPolicy

Sections

.text
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ