b4f5ade1826df17a44c245a2d9fd703027e7359848051f75bd14961e29f171e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4f5ade1826df17a44c245a2d9fd703027e7359848051f75bd14961e29f171e6
Size

63KB
MD5

bfe836b99d6ac2081471f52739e771b0
SHA1

54dc5dafad64282682c5ee7de9d6f6402e3f358f
SHA256

b4f5ade1826df17a44c245a2d9fd703027e7359848051f75bd14961e29f171e6
SHA512

67b0ec77508de40a3653acedc939e24e81be750556aa51954432dc2f1789acd52551aa3a1b6cf1e0f96caf10fad71943c491e02bfc20418fc18c9db949d3d31d
SSDEEP

1536:0TMC7DWZZzY3qFSkFuIc6wPs8u4+04lCbQ7GRrMd7sQ67DQBYh:0gC7CPzYPkFuN0WWCbiGRxQ67WO

Score

N/A

Malware Config

Signatures

Files

b4f5ade1826df17a44c245a2d9fd703027e7359848051f75bd14961e29f171e6
.exe windows x86

7556d6e37ecd73ec2fcfbd10c550df8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CmdBatNotification
RegisterWaitForSingleObjectEx
FindVolumeClose
GetNumberFormatA
SetConsoleCursorPosition
GetProcessPriorityBoost
GetVolumePathNameW
GetEnvironmentStringsW
GetDiskFreeSpaceA
MoveFileExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE