2ec416920f6236e5bd8a236828326855012713ac8f86cf08c7eff11d8d1ab240 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ec416920f6236e5bd8a236828326855012713ac8f86cf08c7eff11d8d1ab240
Size

132KB
MD5

899f44ec14c72a0a172a5536f3163899
SHA1

2a67553a7ebc74b103c59d1ffb042ee4274813cf
SHA256

2ec416920f6236e5bd8a236828326855012713ac8f86cf08c7eff11d8d1ab240
SHA512

d845d8ac4fbcca44cc12b440a4842fdcab945601c4cb486e7eb4f6261a456ace5243cd435f412599af0bb87f34b2e00baf25f62301fd3ceeb5ea5ae360b529e3
SSDEEP

3072:veZUG4gfV0tJ9k4f3zP9zBo88R5paAtjn9/V47vdPSd3HZBLwWKjw:veZN4uytYCzPJvSp/T9N2PSdpBTe

Score

N/A

Malware Config

Signatures

Files

2ec416920f6236e5bd8a236828326855012713ac8f86cf08c7eff11d8d1ab240
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE