c1ebb8f3d56e8a0ddb7cc3429d07816013cadd3addc96c09ef70abc228854b87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1ebb8f3d56e8a0ddb7cc3429d07816013cadd3addc96c09ef70abc228854b87
Size

402KB
MD5

54d23f3ae70e4eedb67b9bf1de6f75c2
SHA1

0fb92855a4c7bfd2fcb24a5cd8ef46cf0f58238c
SHA256

c1ebb8f3d56e8a0ddb7cc3429d07816013cadd3addc96c09ef70abc228854b87
SHA512

127ca1b1bd673bab5eaf09ddba0e450844c920930ee42839381c157139d29bc72394d443123c8f7560cd91e8923ad2583746784dad1504fa464bdf4a6d67a277
SSDEEP

6144:ixMoYhXSDkmTu/+GC/yXqdGTTWIfTcttcCmGJwM3caw/8q++DJucIGy7p3qgKvK:iJYYJuWG8pGfW0hWwMMawp+7F3qgKv

Score

N/A

Malware Config

Signatures

Files

c1ebb8f3d56e8a0ddb7cc3429d07816013cadd3addc96c09ef70abc228854b87
.exe windows x86

4a497d40147c502deb65432e7decc0fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
GetACP
GetProcessHeap
InterlockedExchange
SetEnvironmentVariableA
SetCurrentDirectoryA
VirtualAlloc
FatalExit
CreateSemaphoreW
Sleep
DeleteFileA
GetStringTypeW
DeviceIoControl
SetVolumeLabelA
CreatePipe
DeleteFileA
GetShortPathNameA
GetModuleHandleW
GetModuleHandleA
DeleteFileA
WriteConsoleW
CreateFileMappingW
InitializeCriticalSection

mshtml

ShowModelessHTMLDialog
ShowHTMLDialog
ShowModalDialog
DllEnumClassObjects

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrs
Size: 393KB - Virtual size: 884KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ