bf86929aea841c551f1b5e8bde13c449e67ce62bc0ae6ca1c2b8865d1d1504ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf86929aea841c551f1b5e8bde13c449e67ce62bc0ae6ca1c2b8865d1d1504ca
Size

300KB
MD5

058b4b2cc5529ba004daa42c86c9b260
SHA1

e69d115d7bbccd76b69af9bb9bd55b1bc72481c9
SHA256

bf86929aea841c551f1b5e8bde13c449e67ce62bc0ae6ca1c2b8865d1d1504ca
SHA512

403281ebacb3f68b3a2c5101a39c82635f10d5311a07d26a037c4f34caed1e800efffe41e6ee1b8b0e8c18d80277e4945839ad3fc84bf6202957da395f3d2d39
SSDEEP

6144:N/VPod+gYmo+v3mC9k/ESTOHYy3Lj0fkXqZtTms3mN67YBg:Fxg/N3mW6dTOHYuyTmAms7F

Score

N/A

Malware Config

Signatures

Files

bf86929aea841c551f1b5e8bde13c449e67ce62bc0ae6ca1c2b8865d1d1504ca
.exe windows x86

e92cb8c4d5fe85619df4624ee923c30e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FileTimeToLocalFileTime
GetLogicalDrives
lstrcmpiA
CreateWaitableTimerW
GetStdHandle
GetPrivateProfileStringW
TlsFree
IsValidCodePage
GetBinaryTypeA
SetLastError
CreateNamedPipeA
lstrcmpiA
EndUpdateResourceA
GetTickCount
GetExitCodeProcess
GetDriveTypeA
lstrcmpiA
lstrlenA
HeapCreate
lstrcmpiA
lstrcmpiA

objsel

DllGetClassObject
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow

Sections

.text
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 292KB - Virtual size: 296KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ