bf6517950e5a5cb89bd449312bb79d75cac4b85f060f640b9dfe88bb1e3d03a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf6517950e5a5cb89bd449312bb79d75cac4b85f060f640b9dfe88bb1e3d03a9
Size

63KB
MD5

6c55e51962dd7793e7e16b067315adb0
SHA1

05f33168754ade81281d59ce288dc64c065edad1
SHA256

bf6517950e5a5cb89bd449312bb79d75cac4b85f060f640b9dfe88bb1e3d03a9
SHA512

b8ff905acc1ad43aa23395a682d964d117582cfcb2f1a44e3dc0b0f4b24b5e640bd875152bdccd2c0cab098bb9efa09d0ce7de6515ea1fb51ac70a5c4a2f8181
SSDEEP

1536:hkZLom6sXDI3/P+2z+WfOfR9KZE+YRz8Cj+Njaqknk:mn68y9zPWfR+lahnk

Score

N/A

Malware Config

Signatures

Files

bf6517950e5a5cb89bd449312bb79d75cac4b85f060f640b9dfe88bb1e3d03a9
.exe windows x86

c3d8981091815590e243063e8df34707

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveLocalAlternateComputerNameW
VirtualFreeEx
IsProcessorFeaturePresent
BackupSeek
WritePrivateProfileStringW
GetConsoleCommandHistoryLengthW
GetDriveTypeW
GetAtomNameW
HeapReAlloc
GetFullPathNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE