8c1f8d8b0f379095c54b3e608050e999a34cc2b78ff0cde01fa5b40640f9673b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c1f8d8b0f379095c54b3e608050e999a34cc2b78ff0cde01fa5b40640f9673b
Size

132KB
MD5

454f766b158fb63e32fd4933d3b5ebec
SHA1

265fa1772f8afcbe65d157da5d20c71deb64690e
SHA256

8c1f8d8b0f379095c54b3e608050e999a34cc2b78ff0cde01fa5b40640f9673b
SHA512

5df01b93da2a4a5db5023bcf867a92b8050b20e82daf2d69d2ae50c3f93b0721f874964e0376035223d8e83854ac7a88b02b62461bee36792547115e30ecb671
SSDEEP

3072:5yBIOTd+1Mzqt8Y66x6odjCOC3TyeKsm2x5M+SZpd9C0sPKduLA3scBN:YB/Td+1cqt2oz8OC7Ksm2bMLBk0YE3J

Score

N/A

Malware Config

Signatures

Files

8c1f8d8b0f379095c54b3e608050e999a34cc2b78ff0cde01fa5b40640f9673b
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE