f498d351f52a8e4d3f5902c3e286e3d26cf78dca300f99246af393e6d8a17ca4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f498d351f52a8e4d3f5902c3e286e3d26cf78dca300f99246af393e6d8a17ca4
Size

132KB
MD5

60614c9fe4ec57c9b3a5170dd3a1fa01
SHA1

1a69e2e1015aaa4b06ae00d39626b3d394d550ad
SHA256

f498d351f52a8e4d3f5902c3e286e3d26cf78dca300f99246af393e6d8a17ca4
SHA512

5ce12be8e84bb8e278889e8426d86d62709d336717bc7324388e3e10086188981db5fc662e4b3e09dd7c01927b1b7b702ccc56f95785fedaab6a95aa1da3a6f9
SSDEEP

3072:vHscuUiW8QkcIGuP+TEkH/b3FnBbBpCj321:vHscB8XGuPWEgb3/ui

Score

N/A

Malware Config

Signatures

Files

f498d351f52a8e4d3f5902c3e286e3d26cf78dca300f99246af393e6d8a17ca4
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE