36feafa697e804d170c973d0302ad5955c727e0614de659fed2e333094acf2c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36feafa697e804d170c973d0302ad5955c727e0614de659fed2e333094acf2c4
Size

132KB
MD5

99bb9fc8ed13748f2579d600df6c45ac
SHA1

267c480a2615551f260cec160d7aa7ffe7124a59
SHA256

36feafa697e804d170c973d0302ad5955c727e0614de659fed2e333094acf2c4
SHA512

e9fbac865783f60454f25a069fb203b71425a0ed8ed1fa238938a7c97924ac8d8d08cfa2f918233e486a7242ab6560ae49eccadce43c0213a354f83511199d5b
SSDEEP

3072:+QN93XY40qjrP/8CtrWKq0NeqWiJ1hoXk+9TkOCvfLZlMw:+mtQq31pWcpWiPokhOOfLZ

Score

N/A

Malware Config

Signatures

Files

36feafa697e804d170c973d0302ad5955c727e0614de659fed2e333094acf2c4
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE