549dc47788e2570794a4f0978bddcfe43ae5f1b4a0c36269ce9356ce6de201c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

549dc47788e2570794a4f0978bddcfe43ae5f1b4a0c36269ce9356ce6de201c8
Size

471KB
MD5

48dad96b593e665a9c3822895fd01030
SHA1

c641e17573a24f70570033ef6d1fd90232d97d3f
SHA256

549dc47788e2570794a4f0978bddcfe43ae5f1b4a0c36269ce9356ce6de201c8
SHA512

620e5fc53ae1d0b6ec3d559b518cd465f52cade198bbb6dd288471869329b4d7844dfdae5c243cbbf130a646b026fb5582ec97872f3f459505184ae559bbb58e
SSDEEP

12288:1f5syC+byS5syS5B+by/yS5Z5Z5Z5sy/yg:Nk2IaKag

Score

N/A

Malware Config

Signatures

Files

549dc47788e2570794a4f0978bddcfe43ae5f1b4a0c36269ce9356ce6de201c8
.exe windows x86

3320ae779341d0617393b8d07543fb98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA

user32

MessageBoxW

gdi32

GetTextMetricsA
LineDDA
PolyTextOutA

Sections

.code
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: - Virtual size: 816B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ