baf8afe3ea49169b1bff763eef07bc917d9e152db743a63dc474bd12c5b57774 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baf8afe3ea49169b1bff763eef07bc917d9e152db743a63dc474bd12c5b57774
Size

62KB
MD5

80e4d416e98b5367485f7bb9c785b1c4
SHA1

516594da0ae420efa6f4f317f032cf69415ddd8a
SHA256

baf8afe3ea49169b1bff763eef07bc917d9e152db743a63dc474bd12c5b57774
SHA512

902f8e896098b6933a714402ee910d5d08427530998d34c7ffea0e2639d0defd4c465c82ee73a32ff0789da9434ff674c302c7261fd2cfcd4dc624d17bb0c86f
SSDEEP

1536:JbiyeeOex2KDKaP0fzjatopFSSyi56xbWmRypliz8:JuyeXeDKz34MwSpIRWWye8

Score

N/A

Malware Config

Signatures

Files

baf8afe3ea49169b1bff763eef07bc917d9e152db743a63dc474bd12c5b57774
.exe windows x86

49a9b71e8b41c94d1f33e193a9964ae2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupRead
DeviceIoControl
UnlockFileEx
GetTickCount
CreateJobObjectA
WriteFileEx
GetModuleHandleW
BuildCommDCBA
CreateSemaphoreA
GetSystemDirectoryW
GetCurrencyFormatW
ReadProcessMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE