bbf8f905c80506f70ccceb8e4eee6f84ecc5b17f7e4d37217a2c4e390b64417c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbf8f905c80506f70ccceb8e4eee6f84ecc5b17f7e4d37217a2c4e390b64417c
Size

824KB
MD5

45b8dd762d313cdd33c9db29a24674f0
SHA1

20f4ee9fa74c2c027bc1d611f90fd4a6af8df6da
SHA256

bbf8f905c80506f70ccceb8e4eee6f84ecc5b17f7e4d37217a2c4e390b64417c
SHA512

0cfc74b878e288c4887c35c78b8171dabb40b4106b58d4fb8c61943883e71563d368c87cbba74f867f9f585976ed4a6905ff43f27f8f965d28aca5babe59248d
SSDEEP

6144:MBaZA6AM5tm1BS4i4jARHKhyFxQZZxbUP10glX1WMYesPvMgiRXu/4kTyaI3UDk0:McA6SbVi42BFx8dUP1fwesMrCyajDZ

Score

N/A

Malware Config

Signatures

Files

bbf8f905c80506f70ccceb8e4eee6f84ecc5b17f7e4d37217a2c4e390b64417c
.exe windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 205KB - Virtual size: 640KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 322KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rmbrfoc
Size: 240KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE