bed09eaf5d5b95e87862f7b4591c5a75a5c40139dd12758622d27cad759e8c3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bed09eaf5d5b95e87862f7b4591c5a75a5c40139dd12758622d27cad759e8c3b
Size

58KB
MD5

6f8a3532c51667bd8b2490539b475a11
SHA1

8ba1e145a873312ee94158dd58b9fd5479138b3c
SHA256

bed09eaf5d5b95e87862f7b4591c5a75a5c40139dd12758622d27cad759e8c3b
SHA512

460eb8f201a32807fdfa3104a9ddf907508b7ef46b7581c94ca5c5157856d1a41aa99b900c777dcd2de90bdc9626c7bec7c1042a5c25bef5a13b1a70528cab9a
SSDEEP

1536:LNxcWwRNA9HaACpBT6cyx0NrgpDspGWQD/HfFWKj9:hxcRWajw0NjpGWaHfUK

Score

N/A

Malware Config

Signatures

Files

bed09eaf5d5b95e87862f7b4591c5a75a5c40139dd12758622d27cad759e8c3b
.exe windows x86

9956cc60357f0c1d796990249a6c11b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
ReadFile
ExitThread
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateThread
Sleep
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE