91edf560391b6512ec89aa92f7eae940c14326c91278ba4e9b7ae4d3caef25a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91edf560391b6512ec89aa92f7eae940c14326c91278ba4e9b7ae4d3caef25a3
Size

828KB
MD5

b6f4368c60e39b34e6c5470bed98e693
SHA1

79af2b4749a595eb6260a8a8ce4e533bf4388411
SHA256

91edf560391b6512ec89aa92f7eae940c14326c91278ba4e9b7ae4d3caef25a3
SHA512

5c126a1449b64c55b55e41f21adb6608f8bff0fcc5ff505a7d1c7da8158f7489ba3e9ca0957e72ccd71731d489cf99e7aceebc53c425985126dd8180d4c7c7e9
SSDEEP

24576:n2487NDEt9pmxm1SYb09D10MoQDv5/Pxiw9tBQuq:n2487WLpmyY10MostT9

Score

N/A

Malware Config

Signatures

Files

91edf560391b6512ec89aa92f7eae940c14326c91278ba4e9b7ae4d3caef25a3
.exe windows x86

2062490a895e2c749b87c5bc08ee6daa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentDirectoryA
WriteFile
GetDiskFreeSpaceW
GetTimeFormatA
GetShortPathNameA
GetVolumeInformationA
HeapFree
GetModuleHandleA
ReadConsoleW
GetEnvironmentVariableW
CreateSemaphoreA
GetProcessHeap
GetStringTypeA
GetLastError
lstrcatA
lstrcmpW
VirtualProtect
CompareStringW
GetPrivateProfileIntW

es

LCEControlServer
NotifyLogoffUser
NotifyLogonUser
ServiceMain

Sections

.text
Size: 20KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 804KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ