bdae4ff8213dcdf609f1fa057797fc35e62d7198aa814048f73a636e4f3c92a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdae4ff8213dcdf609f1fa057797fc35e62d7198aa814048f73a636e4f3c92a8
Size

115KB
MD5

91683cdb3d9b021d1e3472d03a9c871d
SHA1

28e6f7157a2a54d3bcbe6d5b56454208ade921ec
SHA256

bdae4ff8213dcdf609f1fa057797fc35e62d7198aa814048f73a636e4f3c92a8
SHA512

2557a3cbfcdee6d3c4604dd23c920a7c242d8682b426837952e737e49c56d7489e4ba76335fc5e7135814d101c118c5d36580ed46e9605ddae83c6d92bded94e
SSDEEP

3072:sby4co1+wMHnOkKmPabFltzNjdfJkzrKC1VGuTNAhz3:sbxt1MHOl/FltzfB1CbEz3

Score

N/A

Malware Config

Signatures

Files

bdae4ff8213dcdf609f1fa057797fc35e62d7198aa814048f73a636e4f3c92a8
.exe windows x86

9fec62d3153c392d34f175e882c0f6b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
FindFirstFileExA
GetModuleFileNameA
DefineDosDeviceA
AddAtomA
HeapCreate
ConvertThreadToFiber
SetComputerNameA
TlsGetValue
FindFirstChangeNotificationA
lstrcpyn
SleepEx
ReplaceFileW
WaitCommEvent
LCMapStringA
SetDefaultCommConfigW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE