50a81c26035450ccc8c47d6abf498220f970bc05c857186db2a1c896b1d72cb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50a81c26035450ccc8c47d6abf498220f970bc05c857186db2a1c896b1d72cb0
Size

132KB
MD5

541e2762b7e17b69d7723dc609566424
SHA1

b9dc99761abc92181f82a542cb2cb12210e3fa1c
SHA256

50a81c26035450ccc8c47d6abf498220f970bc05c857186db2a1c896b1d72cb0
SHA512

9427793262dc849df4ad292ca2a3fb41d37f218facafefa02d925dbd7455bc039ec87ccc3a2b29851f357d2e9114bab0abb395649df6c6f2af21d334c8a22628
SSDEEP

3072:sj2TAC3pMD2TinN8LSZGNn8ZW5TsuxnyF79Rq2lOjXaoV:sKTb3pBWhGN8QsEnyFC2OjN

Score

N/A

Malware Config

Signatures

Files

50a81c26035450ccc8c47d6abf498220f970bc05c857186db2a1c896b1d72cb0
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE