bf9d1260d1363c417e8d399f377761cf52db8910 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf9d1260d1363c417e8d399f377761cf52db8910
Size

4.1MB
MD5

bfe6fc61189fdf8eda109930a53edf29
SHA1

bf9d1260d1363c417e8d399f377761cf52db8910
SHA256

4b00e83fb9830c5da2da8504e47165de4fe610eee42ecbe103401583dee54e21
SHA512

9f5fc85188c411e220df7e678cb0a2d44a76392833bb84740ca6e617b08d40018f804011931f04cca1f264ce6de56bf6a5b840644a1c2450cc3ce01c8cf7aa7c
SSDEEP

49152:faMo2UHkHxWlgfnjle/p6+iSsxhWOXqXONrLFtt:Fo2YkH0lqnxe/pBiS+h7qXQtt

Score

N/A

Malware Config

Signatures

Files

bf9d1260d1363c417e8d399f377761cf52db8910
.dll windows x86

1d5a05cf7aed59c90f3f52d09111adf7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ