bef3e04e4d892e757ef086a5f356a5cabac89b403774e3231fe7bf094dd49911 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bef3e04e4d892e757ef086a5f356a5cabac89b403774e3231fe7bf094dd49911
Size

86KB
MD5

61d78d045c19f929f6f7ed902560d4b8
SHA1

6d44d564db8d0cc07eaeb8853de16c02b5844998
SHA256

bef3e04e4d892e757ef086a5f356a5cabac89b403774e3231fe7bf094dd49911
SHA512

5c4180f77df5e73de96269a08768600e1c54daaf3c1b33ee52b5e3aab31d383706ac577889e6ac44b635f4f357c9c0ab9e4793bf29e63dbcebcb553491ca430c
SSDEEP

1536:oNVk7AHixBHL+2hqUeezcu1uw/TNGZfp2lpjVrs2ryrd1vUQuqgmsZcJAEKnf:QV+AHwr+2hqguw/TI72lHs2qzrW

Score

N/A

Malware Config

Signatures

Files

bef3e04e4d892e757ef086a5f356a5cabac89b403774e3231fe7bf094dd49911
.exe windows x86

9ce5f34dd678878922bbba62f183df64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapExtend
HeapValidate
GetProfileIntW
ExitThread
GetStdHandle
AddRefActCtx
GetModuleHandleExW
CreateSemaphoreA
ValidateLCType
GetNumaNodeProcessorMask
WriteProfileStringW
InterlockedCompareExchange

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 29KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE