ded63aa005e703109d941d5d2802abf1be4e5efc928d900796df562d1dad170a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded63aa005e703109d941d5d2802abf1be4e5efc928d900796df562d1dad170a
Size

63KB
MD5

08d73b1431916fcbaffe83b507c8e21e
SHA1

0311dc90d2bf40132148aee6ec2c6a8da87287f7
SHA256

ded63aa005e703109d941d5d2802abf1be4e5efc928d900796df562d1dad170a
SHA512

4cc0692490ba4df83b618c40a3552256b7817a0231efe909408b89c223fe646966ff6d043077e832cbc6fb4bf82388eea54cce46b06640734434baf3372baa2b
SSDEEP

768:PCrBJvgwealrQmESdfflD+qEcbXnC1ItsLFJFBt4mOZCAm8RaNGBUohB:4BJvgwdlkmE6D+qZbXSLF9t4mOu6dB

Score

N/A

Malware Config

Signatures

Files

ded63aa005e703109d941d5d2802abf1be4e5efc928d900796df562d1dad170a
.exe windows x86

8b8d33d019af058a5f85cf17c652d3ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameW
FindClose
CreateFileMappingA
HeapCreate
GetCurrentDirectoryW
CreateEventA
ReadConsoleW
CreatePipe
FindClose
CreateMailslotA
CopyFileA
SetVolumeLabelA
GetEnvironmentVariableW
GetFullPathNameW
CreateFileA
CreateSemaphoreA
FindClose
GetStringTypeA
Sleep
GetModuleHandleA
GetModuleHandleW
GetVolumePathNameW
VirtualFree

mshtml

DllCanUnloadNow
DllGetClassObject
PrintHTML
ShowModalDialog

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ