3560c0df15844af2372397f2c756139ba800407b054c054531d67d6b013cd64c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3560c0df15844af2372397f2c756139ba800407b054c054531d67d6b013cd64c
Size

55KB
MD5

0135b93a753a9c470cc05f5502ba1140
SHA1

b3d28c78135f3d3d9cd6c226e981f3f071d9ac67
SHA256

3560c0df15844af2372397f2c756139ba800407b054c054531d67d6b013cd64c
SHA512

06e4749c964acbe8a7107c549e61caedcde2c76a18956e2f7968109129d9cea46f7bdbd0db74b1120954eb2269c398a3900044a2c08d62dd51d9dc7bcbfc6cb8
SSDEEP

1536:GaTQCNzy0YevymxfSxPGtQtXzN2gxdOdmTWK/7akZj:RTQ677x60qzIgTOQTWK/

Score

N/A

Malware Config

Signatures

Files

3560c0df15844af2372397f2c756139ba800407b054c054531d67d6b013cd64c
.exe windows x86

023402dbd2af8a8eaee923bb0ae4e85f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
SetLastError
IsValidLocale
GetVolumePathNameW
GetStdHandle
lstrcmpiW
HeapCreate
Sleep
GetModuleFileNameA
GetProcessHeap
lstrcmpiW
FileTimeToLocalFileTime
GetDriveTypeW
GetModuleHandleA
lstrcmpiW
CreateNamedPipeW
GetLogicalDriveStringsW
CreateMailslotW
WaitForMultipleObjects
DeleteFileA
OpenMutexA
lstrlenA
lstrcmpiW

scecli

SceSysPrep
SceOpenPolicy
DeltaNotify
InitializeChangeNotify

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ