a98de62464f4586aa221cfe73af4093002ecfa65600a5b92893a87378e72681f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a98de62464f4586aa221cfe73af4093002ecfa65600a5b92893a87378e72681f
Size

100KB
MD5

002559c158c30960ddd16d73a6f3310f
SHA1

6dc96c1f7d132cec85bc094315708a236f6f87ba
SHA256

a98de62464f4586aa221cfe73af4093002ecfa65600a5b92893a87378e72681f
SHA512

207f269f2f485c915a6fbda7d19f4fe157fa06136f3351bd9e118c01fbd093245d5ad6cec85fd4902fef1616232dfc51aa509282c1fb4cc012f6c2baba7d651e
SSDEEP

3072:KJEWEdRXGQG0/xpQiZK2DAtebRYGcA9b11e:0EVNXLBGGH9bW

Score

N/A

Malware Config

Signatures

Files

a98de62464f4586aa221cfe73af4093002ecfa65600a5b92893a87378e72681f
.dll windows x86

41426c547f82c0894be8f9d75bce5996

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
RegisterWaitForSingleObjectEx
CallNamedPipeA
ConnectNamedPipe
SetNamedPipeHandleState
GlobalWire
GetVolumeInformationA
GetStringTypeExA
WaitForMultipleObjects
lstrcmpi
RaiseException
GlobalDeleteAtom
WriteConsoleInputW
TryEnterCriticalSection
WaitForMultipleObjects
GetCompressedFileSizeW
Sleep
BuildCommDCBAndTimeoutsA
WaitCommEvent
ReadConsoleInputW
WritePrivateProfileStringW
EnumSystemLocalesW
CreateMutexA
FlushInstructionCache
GetStringTypeW
ExpungeConsoleCommandHistoryW
GetTapeParameters
HeapReAlloc
GetBinaryTypeA
OpenJobObjectA
SetCommMask
BeginUpdateResourceA
GetProcessHeaps
RegisterWaitForSingleObject
ClearCommBreak

Sections

text
Size: 8KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ