bd2ba34c439aa9a64c3067bf6b7fb91bb2a16fde3caa0bbdd85f68d9f70bad5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd2ba34c439aa9a64c3067bf6b7fb91bb2a16fde3caa0bbdd85f68d9f70bad5b
Size

164KB
MD5

ca5c512fd47cae1cf45bf7927509e97d
SHA1

ae6569db5868aa90dad21e7c183a42c721125e93
SHA256

bd2ba34c439aa9a64c3067bf6b7fb91bb2a16fde3caa0bbdd85f68d9f70bad5b
SHA512

61d930746bc374b8c5b7ff5a1c6c756b1d7ecf34d4c260a7e3d61c913802a65c8a2e9c43496ff8f3c047c4aa761a3d2f7f6cd6a5fa7ddc2a0e248929236f6911
SSDEEP

3072:23/VefLib+vQOS9bU5Qm5tjsYvpSTowDEwLBrA6ZVfmcDP:E8LibEBiQ7tj9E6wLBs6ZVxj

Score

N/A

Malware Config

Signatures

Files

bd2ba34c439aa9a64c3067bf6b7fb91bb2a16fde3caa0bbdd85f68d9f70bad5b
.exe windows x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE