31fa0b4cd7d1c48a078c3675c7137434983807f5699b77ac796a821f91271df6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31fa0b4cd7d1c48a078c3675c7137434983807f5699b77ac796a821f91271df6
Size

132KB
MD5

42f0ded0b6edb9ff6acd76f52a873db7
SHA1

40f74bf45fae8b59fce85817163b7e732e3c5bcd
SHA256

31fa0b4cd7d1c48a078c3675c7137434983807f5699b77ac796a821f91271df6
SHA512

47bdbd3cc191017f795d056d82f850f62965bcc1c749024b7b9157b12e4c2fa800b4e3560d4990a0a302a0439f99fda56f9060195752fe457ba3c7a005d48337
SSDEEP

3072:WsntHHaCmHOnYiZNuDMQiOH40Wt+BcKS4L7NjSsK2scU/j0QixK:Ws8rOY2NEZXsYBywIf2sJL0Qix

Score

N/A

Malware Config

Signatures

Files

31fa0b4cd7d1c48a078c3675c7137434983807f5699b77ac796a821f91271df6
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE