bfb41ae35dd32bf4ae596223b80c661a03f625105b7eff603a07103bbaa66cdc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfb41ae35dd32bf4ae596223b80c661a03f625105b7eff603a07103bbaa66cdc
Size

139KB
MD5

6558646c6ea139284d59dad4dae0c669
SHA1

6b85435f1c1c9196204cc637343f20a6e72d32e2
SHA256

bfb41ae35dd32bf4ae596223b80c661a03f625105b7eff603a07103bbaa66cdc
SHA512

07d69aedb150149d182a0d019a6524129f91a414cb33718548cc9f7a18e507d553a12e65864ac9ef701247540a503d98082613b6900c3e9c82870201424e526a
SSDEEP

3072:3VdiduQUkWjHLrQ89Uw70Bnz6+zngFNX:3VgI/vQIgdz6+MN

Score

N/A

Malware Config

Signatures

Files

bfb41ae35dd32bf4ae596223b80c661a03f625105b7eff603a07103bbaa66cdc
.exe windows x86

38109c80284ead4e9b8dc9e3fae83cd8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p___initenv
_adjust_fdiv
__p__fmode
calloc
_exit
atan2
_except_handler3
_initterm
__set_app_type
_XcptFilter
__p__commode
_controlfp
__getmainargs
free

kernel32

IsBadWritePtr
GetSystemDefaultLCID
GetLocaleInfoW
GetModuleHandleW
SetFileTime
GetCurrentDirectoryA
lstrcmpiA
IsDebuggerPresent
CreateProcessA
InterlockedIncrement
CreateFileMappingA
InterlockedCompareExchange
GetModuleFileNameW
FormatMessageA
GetTempPathA
GetThreadLocale
GetProcAddress
GetDriveTypeA
VirtualProtect
GetOEMCP
MulDiv

Sections

.text
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ