bf331b795dd8ed4bb615eab93298794d2bd039749b26b0ff359edf716e478be8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf331b795dd8ed4bb615eab93298794d2bd039749b26b0ff359edf716e478be8
Size

62KB
MD5

70a7cff4743055238c8d823616b5c55a
SHA1

57713bc66404fd12fd3c74f3d7bd1390b4fe8793
SHA256

bf331b795dd8ed4bb615eab93298794d2bd039749b26b0ff359edf716e478be8
SHA512

218cf5697dfdb8af4b973794a1438ee2a0a0fc2cc5b64956ee67763b4c0b330136d406a2ee1d69372c6bf9212368dab0aa116b084ba133d13f83b7bbfebc6aa4
SSDEEP

1536:4P4x9gfIKM54gmyYyOE4f4SlJbX1GMIXb:4P4xsVHgPYv4kFGMIL

Score

N/A

Malware Config

Signatures

Files

bf331b795dd8ed4bb615eab93298794d2bd039749b26b0ff359edf716e478be8
.exe windows x86

97520cf6fe8f4dd158a249b755323d03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddLocalAlternateComputerNameW
GetVolumePathNameW
VDMConsoleOperation
HeapDestroy
lstrcpyW
GetLargestConsoleWindowSize
AddLocalAlternateComputerNameA
BaseDumpAppcompatCache
GetWindowsDirectoryA
Thread32Next

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE