bf5c51b51c6b1b1c1233c5e3c72dcb8c5e70f4509bd433a9f82954fbbd58c140 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf5c51b51c6b1b1c1233c5e3c72dcb8c5e70f4509bd433a9f82954fbbd58c140
Size

809KB
MD5

608353340f7de8205941d814d7c29800
SHA1

ae5a39712fd3dd37b8695867282218dfbf5d53c4
SHA256

bf5c51b51c6b1b1c1233c5e3c72dcb8c5e70f4509bd433a9f82954fbbd58c140
SHA512

f0f12b9f676eae924c77475f472789a5352e1362cfc908c96d644388a86b81209abc3ecf98e904d97becd017933c17de7561eefe06e1d64142883389830262fd
SSDEEP

24576:oihHRFa6UdVbpVgLvmGBRScF5kcul9Wf72XlWNXac31:dhHu6SNaO+RbTul476cN

Score

N/A

Malware Config

Signatures

Files

bf5c51b51c6b1b1c1233c5e3c72dcb8c5e70f4509bd433a9f82954fbbd58c140
.exe windows x86

ebf46df66027e8abb7e449e1623e68d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
GetCommState
CreateEventA
lstrcpyW
IsValidLocale
GetProcessHeap
SetLastError
lstrcpyW
GetVolumePathNameW
LoadLibraryA
DeleteFileA
lstrlenW
GetConsoleAliasW
GetModuleFileNameA
GetStdHandle
lstrcpyW
FileTimeToLocalFileTime
GetStartupInfoA
GetLogicalDriveStringsW
VirtualAllocEx
GetLocaleInfoA
lstrcpyW
GetMailslotInfo

termmgr

DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORPC
Size: 800KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ADATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE