475307f19d234ec546e20eed64530f1902dffc24d59f93f7362976575e775b4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

475307f19d234ec546e20eed64530f1902dffc24d59f93f7362976575e775b4a
Size

301KB
MD5

4e0bbdfdff851d1c46333d8e88438a70
SHA1

d300bb306769e615b0d1d39ec6f55720022743b7
SHA256

475307f19d234ec546e20eed64530f1902dffc24d59f93f7362976575e775b4a
SHA512

2d60a0cd629875bbb83f0b267f50bf124f5d85977a0935eef0c31133d0e53d57a0732028fdf0fb8fc44784c31ff019598084534b8bdbcc9624bbec92cf97ba04
SSDEEP

6144:CzbxMFsmnnjYZnq+XB5LAld3GF0BMAgI+3Qcma7sASdYj2b3:nHUZq+XbLADsHAvkbmdYj2b3

Score

N/A

Malware Config

Signatures

Files

475307f19d234ec546e20eed64530f1902dffc24d59f93f7362976575e775b4a
.exe windows x86

68868e6418d3564933b125c2b7afe297

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CreateFileMappingA
CreateEventA
CopyFileA
CreateMailslotA
CreateFileA
GetModuleHandleA
CreateSemaphoreA
GetCurrentDirectoryW
GetFullPathNameW
WriteConsoleA
GetStringTypeA
GetVolumePathNameW
Sleep
SetVolumeLabelA
GetModuleHandleW
SetEnvironmentVariableA
HeapCreate
FindClose
GetFullPathNameW
FindClose
CreatePipe
VirtualFree

mshtml

PrintHTML
DllCanUnloadNow
ShowModalDialog
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES
Size: 292KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ