bd2b996887a6391f771928884b7009a2f52536245e35ce59df349049c789d95e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd2b996887a6391f771928884b7009a2f52536245e35ce59df349049c789d95e
Size

130KB
MD5

4cd68d9502fbad473d69404fbf491031
SHA1

b23ee672a18d2abf0e8865bf54e657a125ad74f5
SHA256

bd2b996887a6391f771928884b7009a2f52536245e35ce59df349049c789d95e
SHA512

18568eb38d1cf48478e2ce038b3e00ff49758fb1162df655ed2b82d9c91d6a993b2bfec59c99bcce6189e439d655be081126663dc4fab74c798b2160a57d3d01
SSDEEP

3072:hMOVTSwTzHBGDrDEUc64miRBAB5TFBfnOuYPT41Grt/Mh+Ip:pRSyzHgDriKm6BGs1+t/c5p

Score

N/A

Malware Config

Signatures

Files

bd2b996887a6391f771928884b7009a2f52536245e35ce59df349049c789d95e
.exe windows x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ