PSavFix[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PSavFix.exe
Size

17KB
MD5

2cd45ba2edbd2cb31ca714752e111f53
SHA1

7b02521c6ab1f27a7e181499cd4519b9c2b4755d
SHA256

5f72cde481abae21c57f71126b52b9c98a49255e8a669f38b7e8b5817f4bd81d
SHA512

bf6d41b7cb201525574d7ef375a388932295e5658bfeb16f93d8a6d2dab5922cb51c531ecf45cbcf5a40a1b153fe29a83ecefabcb066f7bbbbb72f3c8beb42ab
SSDEEP

192:62l9zUniSY+2wxa2D44bI3ZKxHd9cj0W7jXSL1r8jcMDi:6Ski0xYXaHTzWX8t4cMm

Score

1^/10

Malware Config

Signatures

Files

PSavFix.exe
.exe windows x86

195d5ee20f4827ac8e7a3ae5dd8cef4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_fileno
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
fread
free
fseek
fwrite
malloc
printf
signal
strcmp

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 112B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE