22faf758187609b77f02156f5a131b7e43ff8ee52b8ab2597a59e747ae504b3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22faf758187609b77f02156f5a131b7e43ff8ee52b8ab2597a59e747ae504b3e
Size

55KB
MD5

88e52b9e1d45911a368f860565225300
SHA1

ce576a975777903e5b6ba91d0c664ca067a7ace5
SHA256

22faf758187609b77f02156f5a131b7e43ff8ee52b8ab2597a59e747ae504b3e
SHA512

c352063e2d42d7c2d74444b9055812ab680870555d4afefd1deae8b1309e283d1f51ad9311ec1ecc80c6d726fb5d5d868f642d2b2efb291c529e44c89885ee31
SSDEEP

1536:aaqjSfwASmUMzZkahp+PkpREBNESedrmL:aFSfvSmDFf+Pkp+YLF

Score

N/A

Malware Config

Signatures

Files

22faf758187609b77f02156f5a131b7e43ff8ee52b8ab2597a59e747ae504b3e
.exe windows x86

1902930b176052ad5c1763e3b38a3929

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcmpiW
GetConsoleAliasW
IsValidLocale
lstrcmpiW
SetLastError
DeleteFileA
GetCommState
CreateNamedPipeW
GetVolumePathNameW
lstrcmpiW
GetLogicalDriveStringsW
GetStdHandle
GetProcessHeap
GetStartupInfoA
lstrcmpiW
lstrcmpiW
HeapCreate
GetModuleFileNameA
GetModuleHandleA
Sleep
FileTimeToLocalFileTime
CreateMailslotW

sqlunirl

_AppendMenu_@16
AbortSystemShutdown_
_CallMsgFilter_@8
wsprintf_

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ