3bf080fa1e49a9a64a6cd588417f93f347c3ef49a5a471e4b81fd1d598ed2315 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bf080fa1e49a9a64a6cd588417f93f347c3ef49a5a471e4b81fd1d598ed2315
Size

817KB
MD5

32b3ef4ff1090d9c8973e1e47c664365
SHA1

236fb4c4470389bf8d313671ae81a600507e527c
SHA256

3bf080fa1e49a9a64a6cd588417f93f347c3ef49a5a471e4b81fd1d598ed2315
SHA512

aa7e7f05c4760365c001ad7b918d4d1732a00242d530c805853b80fc1a1ceef8864101ecc61aa982840f436e7a42d0e72a03eb7d686eb0ce5517b1042bcc6087
SSDEEP

24576:yIfV4+gWDSI1HDzoGWHxBAKHNY2Z1QfoaZZ:Td4rI1D1WHxBHNY2Zqo4

Score

N/A

Malware Config

Signatures

Files

3bf080fa1e49a9a64a6cd588417f93f347c3ef49a5a471e4b81fd1d598ed2315
.exe windows x86

1d6e9b9fb6a4f95618aefc93eea5f188

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpynA
VirtualFree
lstrcpynA
lstrcatA
ReadConsoleA
ReadFile
lstrcpynA
OpenMutexW
lstrcpynA
SetThreadPriority
lstrcpynA
VirtualProtectEx
lstrcpynA
FormatMessageW
DeleteFileW
GetCurrentThreadId
GetCommandLineW
GetDiskFreeSpaceW
lstrcpynA
lstrcpynA
CreateDirectoryW
GetFileSize
GetCurrentDirectoryA
GetPrivateProfileIntA
lstrcmpA
GetModuleHandleA
GetFileType
lstrcpynA
lstrcpynA

certmgr

DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ