bf654fadde848bc4a3a4ba9b29e13e65d15b91d1d9feebb8fbd1d920b9752b23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf654fadde848bc4a3a4ba9b29e13e65d15b91d1d9feebb8fbd1d920b9752b23
Size

51KB
MD5

17acc25735d7241a285fc1614176bc03
SHA1

ac95059b00805cd5fda793467d53b5b8a1f4f721
SHA256

bf654fadde848bc4a3a4ba9b29e13e65d15b91d1d9feebb8fbd1d920b9752b23
SHA512

dcb1fab2b061a603f9ecbca79f673d7f3eb2df43680da77a86c0408fb4564acb4dadc456dc3a5ab74ad87e4cd87eeb08b05023696be1d3eec28463e671aa88fa
SSDEEP

768:z+epX5J71sYDx9zmc0yajh3OxhMu+o4CFgH+kv:CyX551jx9zp2KhMu+hVH

Score

N/A

Malware Config

Signatures

Files

bf654fadde848bc4a3a4ba9b29e13e65d15b91d1d9feebb8fbd1d920b9752b23
.exe windows x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE