bfa23f07f1919da0a3dec15d01077904f413b901a61d2ed3bd8d57e7e089782d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfa23f07f1919da0a3dec15d01077904f413b901a61d2ed3bd8d57e7e089782d
Size

15KB
MD5

60ee35e458e13bd4ec22e0fc2ae98d50
SHA1

eb9098bb161d8adbaed3bdc7a48f16cb49502883
SHA256

bfa23f07f1919da0a3dec15d01077904f413b901a61d2ed3bd8d57e7e089782d
SHA512

fe6c8ff040cfa7a690967f46b5ab37989de4b7372e23d6be65880843b01431fdaf74b86af2d1b49b78c6d3730854fffccce721abfa1f0c03575fe33a905b08c9
SSDEEP

384:RHw5sFKiFDwdP5POrdA3miXaZ2GP9VET:JUsD0dRGu3mgC36

Score

N/A

Malware Config

Signatures

Files

bfa23f07f1919da0a3dec15d01077904f413b901a61d2ed3bd8d57e7e089782d
.exe windows x86

d6cdfed59108f0fe81a97f7cb7d9b165

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetModuleFileNameA
CloseHandle
lstrcpyA
ExitProcess
GetModuleHandleA
GetProcAddress
GetFileAttributesA
CreateEventA
LoadLibraryA
Process32First
CreateToolhelp32Snapshot
CompareStringA
WaitForSingleObject
RtlUnwind

advapi32

RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 822B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE