0bf36240a0e89ce0743fc672eb91d3ab188bf30045917beed27900449096c24e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bf36240a0e89ce0743fc672eb91d3ab188bf30045917beed27900449096c24e
Size

107KB
MD5

16f258e302b3a6b15678f8c352e24c00
SHA1

f8bb6358be87065dbf3954243db7aaecd97aea7d
SHA256

0bf36240a0e89ce0743fc672eb91d3ab188bf30045917beed27900449096c24e
SHA512

1c758eb2ffbf147e1b83567b629b1d8c6aa582d34b44b5c3501f1b136737e556f7eee4109e0d7b7fb549a707d80263210877ed066720f527f35058c66fea00ce
SSDEEP

1536:RLCUd57/D55ud+nnkNs236UKOCy9Iq2apjVrs2ryrd1vUQuqQGFNiNwc+c:RLC4f5nkm2pKiqq2aHs2quGf9

Score

N/A

Malware Config

Signatures

Files

0bf36240a0e89ce0743fc672eb91d3ab188bf30045917beed27900449096c24e
.exe windows x86

3633d61a829481225153c58a4484d507

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlFillMemory
GlobalMemoryStatus
CreateThread
RegisterConsoleIME
GetPrivateProfileStringW
GetCommMask
DosPathToSessionPathA
ResetEvent
HeapWalk
OpenMutexA
Module32Next
GetPrivateProfileStructA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 51KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE