0df5a196895c03bff3dde87ca50c42b1d386661f5734ee9e157c45a59bb1f63a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0df5a196895c03bff3dde87ca50c42b1d386661f5734ee9e157c45a59bb1f63a
Size

417KB
MD5

92efeb43bff48ba05baf022547706140
SHA1

d32349f0988862fcc579b28497d7b7f2e4051e66
SHA256

0df5a196895c03bff3dde87ca50c42b1d386661f5734ee9e157c45a59bb1f63a
SHA512

55e695996fdb9e0408ac4a783776b15b7a7edabce79671628a4195dfe5244aef1df3c81d9abfba00c58513861f265e63f76f88cea18d9f5162ee80c5f1257fbe
SSDEEP

6144:TdjUnXf3oe1lP01u/0FxRMVkTWh5yGLwYu6/R+MexmitdHR/OKAWp2DeeHRabWjy:T2v4e70oMeJ5yGLfo3H4RaQy

Score

N/A

Malware Config

Signatures

Files

0df5a196895c03bff3dde87ca50c42b1d386661f5734ee9e157c45a59bb1f63a
.exe windows x86

7af0050d1c29af78abf2b0b1315ba2b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
ReadConsoleW
GetModuleHandleA
GetFullPathNameW
FindClose
SetVolumeLabelA
GetCurrentDirectoryW
Sleep
CreatePipe
VirtualFree
CopyFileA
CreateFileMappingA
FindClose
GetStringTypeA
FindClose
GetVolumePathNameW
CreateMailslotA
GetFullPathNameW
CreateEventA
CreateSemaphoreA
HeapCreate
GetEnvironmentVariableW
CreateFileA

mshtml

DllGetClassObject
ShowModalDialog
PrintHTML
DllCanUnloadNow

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES
Size: 410KB - Virtual size: 924KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ