bfb445772460b0e6f45e83aaf45aa22554aec791be414260c062fcabeffa1676 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfb445772460b0e6f45e83aaf45aa22554aec791be414260c062fcabeffa1676
Size

320KB
MD5

a0713e54cef9e858d31d3be19b591960
SHA1

b38af413096a8419244e2f24500c221128d937cb
SHA256

bfb445772460b0e6f45e83aaf45aa22554aec791be414260c062fcabeffa1676
SHA512

c08dff592d2c15fcf45d4b22f57dfc4e3b7718843d3ee49002238e61588a8bfd92b08502481f3f1935683d0d2131f0a5871f742ee1c44f8fabf2c61a49948c90
SSDEEP

6144:xfc7hX1XUcmtQrH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:S74c2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

bfb445772460b0e6f45e83aaf45aa22554aec791be414260c062fcabeffa1676
.exe windows x86

51c1a64644d854b0b82ab8850252c9b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreatePipe
ReplaceFileA
GetNumberFormatA
CallNamedPipeA
DeleteVolumeMountPointW
SetProcessWorkingSetSize
GetStringTypeW
WritePrivateProfileStructA
GetTapeStatus
GetTempFileNameA
GetConsoleWindow

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE