90f7076d75e2197d9147a7d3de6e0c12e53392df2bb62b623dbc65ad99b22487 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90f7076d75e2197d9147a7d3de6e0c12e53392df2bb62b623dbc65ad99b22487
Size

828KB
MD5

ab4440f5b0613b0b53b4c8795934c1c1
SHA1

4724f2afc625439cc62f0a256f233a6db63e3902
SHA256

90f7076d75e2197d9147a7d3de6e0c12e53392df2bb62b623dbc65ad99b22487
SHA512

9aa867ed647210cd49121dd4d0dcff3ef8e45c1311dad5f23174aabde91a33a4c0963cf93ba7c07214a1a01579ead3ecddab892cd421517b53f46b1f182c7224
SSDEEP

24576:G9JF+U6cB5fmcyQVhLYdkw+hv8cCtKgafYPrP:GpB5f1yKudkw+mczgafY

Score

N/A

Malware Config

Signatures

Files

90f7076d75e2197d9147a7d3de6e0c12e53392df2bb62b623dbc65ad99b22487
.exe windows x86

5ac5cdde64d8f7b7cd0d072a9ab4b273

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentDirectoryA
GetPrivateProfileIntW
GetLastError
GetStringTypeA
CompareStringW
CreateMailslotW
VirtualProtect
lstrcatA
GetModuleHandleA
GetDiskFreeSpaceW
GetProcessHeap
GetTimeFormatA
lstrcmpW
GetVolumeInformationA
ReadConsoleW
HeapFree
GetShortPathNameA
GetEnvironmentVariableW
WriteFile

es

NotifyLogoffUser
LCEControlServer
ServiceMain
NotifyLogonUser

Sections

.text
Size: 20KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 804KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ