bd85eaea285f64fe49e9df821b38eabda939ee8294bfa5b92564d54387a48580 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd85eaea285f64fe49e9df821b38eabda939ee8294bfa5b92564d54387a48580
Size

488KB
MD5

08efb957ba1ec65dabe5d6d097adf680
SHA1

60b6c6566e4c838dbc2302e79acc477564e2c5ca
SHA256

bd85eaea285f64fe49e9df821b38eabda939ee8294bfa5b92564d54387a48580
SHA512

92a65d58abd21c517c128d3cbd9b4456ec3675f06758efc54fd6349963ad95cd038afb3d894f1d016698575851d166fa285529db0990f665a815e96213cf1c06
SSDEEP

6144:+CR75rBBgxt6/0thVQ7pkNp4XCvB62ucAwiPZ4VKQLsLbJUz6D9w2aYafWSjUA:Zhbgz6actkqLQix485k6D90pjh

Score

N/A

Malware Config

Signatures

Files

bd85eaea285f64fe49e9df821b38eabda939ee8294bfa5b92564d54387a48580
.exe windows x86

de088008911b73148af57f87be6ef138

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__p___winitenv
exit
_XcptFilter
_exit
memcpy
malloc
free
strlen
toupper

kernel32

QueryPerformanceCounter
LocalAlloc
GetSystemInfo
SetSystemTimeAdjustment
LoadLibraryW
GetProcAddress
DeleteCriticalSection
CreateFileW
SetEndOfFile
GetFileSize
ReadFile
CloseHandle
LockResource
FindResourceW
GetDateFormatW
GetModuleHandleW
GetVersionExW
OpenProcess
GetSystemTime
GetWindowsDirectoryW

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ