bd6168561153be624cc03be6e5212117c1aa879891021b42057936334d3d468f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd6168561153be624cc03be6e5212117c1aa879891021b42057936334d3d468f
Size

300KB
MD5

f55e1d2610c942739fba916f65ebc580
SHA1

928fe0df73a67f6bf2acef20a36bd4a183ae07d3
SHA256

bd6168561153be624cc03be6e5212117c1aa879891021b42057936334d3d468f
SHA512

7e2695b6bd4f03f1a97c11f14d6fcdfa4542ab398d21d3a12a521a8ed5bf20787d94155e5a7167ebd9f0c4e93f64978b8dd15dd548c22b7979bfaee7e9209b25
SSDEEP

6144:KkiJZK11sIHvSqjdYwP7G2FKkSQU2jsJ:0JZq+IpjmwaGSNIa

Score

N/A

Malware Config

Signatures

Files

bd6168561153be624cc03be6e5212117c1aa879891021b42057936334d3d468f
.exe windows x86

c267df0b727e6857ddd70192fb32bf0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
WaitForMultipleObjects
GetDiskFreeSpaceA
LoadLibraryExW
SetFilePointer
Sleep
Sleep
CreateDirectoryW
GetExitCodeProcess
GetFileAttributesA
GetModuleHandleA
OpenMutexA
GetPrivateProfileSectionA
SetEnvironmentVariableW
InterlockedExchange
GetPriorityClass
Sleep
CreateEventA
lstrcmpiA
HeapCreate
GetDiskFreeSpaceA
GetPrivateProfileIntW
lstrcmpA

catsrv

CreateComponentLibraryTS
DllCanUnloadNow
GetCatalogCRMClerk
OpenComponentLibraryTS

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE