bfe1c90a48e2256ae8e46292f591bf0c181fedf55977f4f61838a1db5d87d4cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfe1c90a48e2256ae8e46292f591bf0c181fedf55977f4f61838a1db5d87d4cd
Size

48KB
MD5

836a2941c6e37b8dd70353a523070d80
SHA1

059cac0f54d05ca33a22ab0c38c424261955b970
SHA256

bfe1c90a48e2256ae8e46292f591bf0c181fedf55977f4f61838a1db5d87d4cd
SHA512

c9d2e1d091fa34b918dd3f4a556f02116db6cb64414a957d5b14e14251ff13565d258294fccce286b7fc6f8b1babfc497b92a7ab6dd9a50ce5cdb2b17817a879
SSDEEP

1536:cEvZNQQHWEX78ZjHsHbBDi9Yqz+flgu9TV:cSpDDsYqzIgupV

Score

N/A

Malware Config

Signatures

Files

bfe1c90a48e2256ae8e46292f591bf0c181fedf55977f4f61838a1db5d87d4cd
.exe windows x86

51c4da4a92865f9ea731be38abb99609

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptCreateHash
RegQueryValueExA
RegCloseKey
DuplicateTokenEx
CryptReleaseContext
CryptGetHashParam
RegDeleteValueA
RegCreateKeyExA

shlwapi

StrCmpNIW
wnsprintfA
wnsprintfW
PathCombineW
PathRemoveFileSpecW
PathFileExistsW
wvnsprintfA
StrCmpNIA
SHDeleteKeyA
wvnsprintfW
StrStrW
PathFindFileNameW
PathMatchSpecW

Sections

.efyd
Size: 39KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qbub
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ixwz
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ