31fc842f66ff3a2428f0b88ac7c6ee17e13f626b1a704537f4aa1b1c3609860b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31fc842f66ff3a2428f0b88ac7c6ee17e13f626b1a704537f4aa1b1c3609860b
Size

55KB
MD5

60134fd2c6621c213716f4b05874bc80
SHA1

96b839044c3ca08c03896d08570b63cd370bc5d9
SHA256

31fc842f66ff3a2428f0b88ac7c6ee17e13f626b1a704537f4aa1b1c3609860b
SHA512

d0d4092d692075520cdd92bafb5ee49669d2a59cef7eeea2681bc0146d688f34841266d15e320b7a4a2761fa23ff5fccf044c79b3a4f2281b3f6283b47786061
SSDEEP

1536:nqqD7qQLhgrV3Fh7CHt8OCaoVuZTJh5ObBXFNfGEmb:nqqLhgJ3Fh7UrCzGJhkbpFRGE

Score

N/A

Malware Config

Signatures

Files

31fc842f66ff3a2428f0b88ac7c6ee17e13f626b1a704537f4aa1b1c3609860b
.exe windows x86

02acd0ddf9fef142a9ba7f88ffd79eb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetStdHandle
CreateMailslotW
lstrcmpiW
GetProcessHeap
GetStartupInfoA
HeapCreate
GetVolumePathNameW
GetLogicalDriveStringsW
lstrcmpiW
Sleep
lstrcmpiW
GetModuleHandleA
GetConsoleAliasW
lstrcmpiW
lstrlenA
GetModuleFileNameA
IsValidLocale
DeleteFileA
CreateNamedPipeW
lstrcmpiW
FileTimeToLocalFileTime
GetCommState

sqlunirl

wsprintf_
_AppendMenu_@16
AbortSystemShutdown_
_CallMsgFilter_@8

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ