bf75496f5aa81cad7ec6105eecab0983cf2b25837934428e88000b51549506e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf75496f5aa81cad7ec6105eecab0983cf2b25837934428e88000b51549506e5
Size

119KB
MD5

1ffc700ccd22c4d9c33eb4f21a77d679
SHA1

4e80446ae63fe110b2080dca8188012ecede7ce1
SHA256

bf75496f5aa81cad7ec6105eecab0983cf2b25837934428e88000b51549506e5
SHA512

1d3acc9169d3d69855ebd0a733a7c8d87f6c731a3cdca2d501f7744546e1c4f99056f80485e3f2631b6094b8a08d42ee67657db62a51a55f5f8580a53757f1b9
SSDEEP

1536:+0q8Z1q/dM/wqH9owmlp3jVtrcIfpjVrs2ryrd1vUQuqSSqK5tnCvv:+ZS1mzV5fHs2qxnC

Score

N/A

Malware Config

Signatures

Files

bf75496f5aa81cad7ec6105eecab0983cf2b25837934428e88000b51549506e5
.exe windows x86

a678d995e5cf47756575d3f80afabc3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFile
GetProfileStringW
LoadLibraryA
LocalUnlock
FreeLibraryAndExitThread
GetVersion
GetFileAttributesA
GetSystemRegistryQuota
LockFile
ConvertThreadToFiber
CreateFileA
IsDebuggerPresent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE