2a92eba00d4f7b3c58b20f008acbce2f81996fe82506b717c9c7946581e732ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a92eba00d4f7b3c58b20f008acbce2f81996fe82506b717c9c7946581e732ee
Size

132KB
MD5

d80a70712863b1d4637ac2910ba9a28a
SHA1

525cf6e0c75e14266e22d940612787f2735b25de
SHA256

2a92eba00d4f7b3c58b20f008acbce2f81996fe82506b717c9c7946581e732ee
SHA512

865cd9156b4f66f34a2fa1f841c2766e590a2c241d222cb59c7420c9b1c2aa077ab359b5c11c2f6bcd8b483574286517cfd5354940fd6677c0280f728ca8bb3b
SSDEEP

3072:gNrVS3X5gz8xRMmd42QEBya4hxHGYxK6F:+c3pvLMm+EsxHGY7

Score

N/A

Malware Config

Signatures

Files

2a92eba00d4f7b3c58b20f008acbce2f81996fe82506b717c9c7946581e732ee
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE