bf12c2ac39ea301bba35c0ab26abe761bb58a892bb5f910690b6e0d8dcde0645 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf12c2ac39ea301bba35c0ab26abe761bb58a892bb5f910690b6e0d8dcde0645
Size

63KB
MD5

05fbd57f7b04e8cc080ec57ddc39b081
SHA1

1300561086e1b55fb7f5bc921702dc777a51a562
SHA256

bf12c2ac39ea301bba35c0ab26abe761bb58a892bb5f910690b6e0d8dcde0645
SHA512

f14ba19f10201ed5373a17eb6348f7fb9c3cf3b274aa781c1bb7e0b940d9d78b91e49371d28d21c3d9dc0c3b7f11d3e619a87500635fa9bdcf05996ffe51c87c
SSDEEP

1536:7/FK2VUaOxzBNx8ERLKSRCRrSaWeNEWUN3BL798H6YPnTK8Bi/o:7NK2AzBklS4Sa/VUNRL79M6YPnTOo

Score

N/A

Malware Config

Signatures

Files

bf12c2ac39ea301bba35c0ab26abe761bb58a892bb5f910690b6e0d8dcde0645
.exe windows x86

e01fa537413f1142842fe1dee7f077b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrivMoveFileIdentityW
RegisterConsoleIME
GetConsoleScreenBufferInfo
BeginUpdateResourceW
FreeLibrary
LockFileEx
WTSGetActiveConsoleSessionId
DisableThreadLibraryCalls
EnumUILanguagesW
RtlMoveMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE