21a35df7ab5c89f14e06c6eb599056399dfd68beb1a2207817bb481e7bb950e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21a35df7ab5c89f14e06c6eb599056399dfd68beb1a2207817bb481e7bb950e7
Size

16KB
MD5

40b26bdbcd513bec621a6d001afafc0a
SHA1

efda28671d9a4925ad9028d7386f0c53e2b281ea
SHA256

21a35df7ab5c89f14e06c6eb599056399dfd68beb1a2207817bb481e7bb950e7
SHA512

00a28b15a0eb5d058b66f7b79077f7aafe901fdae039eca36e5514a780574f577a9b685960a15757d2389a4e39cf370550ebb6eabdeeb456267e1246470f3eec
SSDEEP

192:R5AToMnlANqkMpPAzamc0GfwpUJcIb1XBP3xS4U72OfkB84HHl7LmdtaVAL:R5NUlaq1GS0Gfwsx1xP+72OuH1y

Score

N/A

Malware Config

Signatures

Files

21a35df7ab5c89f14e06c6eb599056399dfd68beb1a2207817bb481e7bb950e7
.exe windows x86

5dd6afff6fc75d68355661fe0b98a5be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FtpGetFileSize
FtpRemoveDirectoryW
CreateUrlCacheGroup
CommitUrlCacheEntryA
DeleteUrlCacheGroup

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE