3fddc966acc66efe260dc04d2d7cba2c0d24960baee7e00e78621b4861e94f99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fddc966acc66efe260dc04d2d7cba2c0d24960baee7e00e78621b4861e94f99
Size

132KB
MD5

1810cb1b98327d5f70327c63f48d1067
SHA1

b00884f034c007b484700d1eefe0b6553c5228b4
SHA256

3fddc966acc66efe260dc04d2d7cba2c0d24960baee7e00e78621b4861e94f99
SHA512

b8b7e95969dadfdb50cc7f6b6b4149d18a086aa0a6200d2d740924440b5251b807991b28b13b67814181222f318bf9185ba6dc0bd6c7e2bf45fce795ad0af859
SSDEEP

3072:w0y97ide7J/JKXiY3ENeBuTQJRD8Cb4EbCf:wJ97XdxKSY3ENeBXJRD8Qu

Score

N/A

Malware Config

Signatures

Files

3fddc966acc66efe260dc04d2d7cba2c0d24960baee7e00e78621b4861e94f99
.exe windows x86

b8a0e1c2b5924610b8047f50bb1e53c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strrchr
tmpnam
wcsspn
strcspn
wcstombs

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE