d7e9d874004745cc643f34e6ac2db2cd1ade0dbdae08b64130165644ca2be08a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7e9d874004745cc643f34e6ac2db2cd1ade0dbdae08b64130165644ca2be08a
Size

304KB
MD5

8208ef414697c81a5532cef1f458d660
SHA1

cbbb8b13f1d6afa5c60c4142b382c092957371cd
SHA256

d7e9d874004745cc643f34e6ac2db2cd1ade0dbdae08b64130165644ca2be08a
SHA512

e8b2ffe29da67704f2679314fc75d1244961db66390f70f922c162ac110c278203626a0ab68e53d3b0f25dffc5accb5feb916a5e433a1e32bcb34dbf2f3e5f5b
SSDEEP

6144:Yjp3SgAfUxeQvpMMbqLvz9UOhxAGnTY1IRUi6AlxBFCdS8op:YjYg6QvpJ0M1I2+xLkw

Score

N/A

Malware Config

Signatures

Files

d7e9d874004745cc643f34e6ac2db2cd1ade0dbdae08b64130165644ca2be08a
.exe windows x86

b08c71081954a3a39b12e952a07b6a2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
CreatePipe
SetVolumeLabelA
VirtualAlloc
FatalExit
GetStringTypeW
SetCurrentDirectoryA
CreateFileMappingW
GetACP
DeleteFileA
DeviceIoControl
Sleep
GetShortPathNameA
InterlockedExchange
GetModuleHandleA
DeleteFileA
CreateEventW
GetProcessHeap
DeleteFileA
CreateSemaphoreW
InitializeCriticalSection
GetModuleHandleW
WriteConsoleA

mshtml

DllCanUnloadNow
ShowModalDialog
PrintHTML
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrs
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ