912143636eb07664db32977d8e1e182824b8256f6784ee1361228ce0702badd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

912143636eb07664db32977d8e1e182824b8256f6784ee1361228ce0702badd4
Size

118KB
MD5

25443d603946163c886ff952e120f030
SHA1

3eeb37cf8f771f1712183dadcd4c28a49bddc621
SHA256

912143636eb07664db32977d8e1e182824b8256f6784ee1361228ce0702badd4
SHA512

e89733dbda292c508595ac72a32446e1920281f12798de602f0893e3bb4cb1f9cb5d291e6ff22689b9d8b1c75abc6c3ea70a43e6ac82cfc8178dbc60f07af2b5
SSDEEP

1536:WYeSh0K8Mo2BXfSS9QHa8+uxmfIG1We3X0EORRUiDl7MbQdf2Mg:WY1h98MrBXKS2dxmfh1LEE0RUM7Dd+

Score

N/A

Malware Config

Signatures

Files

912143636eb07664db32977d8e1e182824b8256f6784ee1361228ce0702badd4
.exe windows x86

ec92ab840fddffa296ebf6b98b8140e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
DeviceIoControl
FatalExit
GetStringTypeW
WriteConsoleW
CreatePipe
SetCurrentDirectoryA
DeleteFileA
GetACP
GetConsoleAliasA
GetStringTypeW
CreateMailslotA
GetShortPathNameW
CreateFileMappingW
DeleteFileA
GetProcessHeap
SetVolumeLabelW
DeleteFileA
CreateSemaphoreW
LoadLibraryA
GetModuleHandleW
VirtualAlloc
SetEnvironmentVariableA

mshtml

DllEnumClassObjects
ShowModelessHTMLDialog
ShowHTMLDialog
ShowModalDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE