bfd4ac7904dc092eb475b826883c4ab797a76d187cf091f1de225e6b8a402304 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfd4ac7904dc092eb475b826883c4ab797a76d187cf091f1de225e6b8a402304
Size

817KB
MD5

34e52120b58e47dc628c366c9a0ff488
SHA1

577ed625bf94da9c88b1472b27703dba13e0e7aa
SHA256

bfd4ac7904dc092eb475b826883c4ab797a76d187cf091f1de225e6b8a402304
SHA512

74789a9cfc7f13e46fe9e1cfb8ef5f4e1a61e201c0549608716f2ccef8d3a8347157826e5607a63efaf26dcb1de7fb5aefb6bf5646fac3b425da31d2f9eb415b
SSDEEP

24576:VsNIoTKrUXPKCQCIaYVVdIKVSSIfSGiy5JfTtnAxcs:KQU/KSYVxS5SGiy5JfhnK

Score

N/A

Malware Config

Signatures

Files

bfd4ac7904dc092eb475b826883c4ab797a76d187cf091f1de225e6b8a402304
.exe windows x86

12b012b81d1db43d4689566433ec6714

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetDiskFreeSpaceW
lstrcpynA
GetCurrentThreadId
GetModuleHandleA
GetCurrentDirectoryA
lstrcpynA
GetFileType
lstrcmpA
lstrcpynA
lstrcpynA
ReadConsoleA
CreateDirectoryW
VirtualFree
GetFileSize
lstrcpynA
VirtualProtectEx
lstrcatA
ReadFile
OpenMutexW
GetCommandLineW
GetPrivateProfileIntA
lstrcpynA
lstrcpynA
SetThreadPriority
lstrcpynA
lstrcpynA
lstrcpynA
FormatMessageW
DeleteFileW

certmgr

DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow

Sections

.text
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 795KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ