1fa9afe1109ce42ad1204409f7ca2552857d9bc1f3ed394613221ab7baeb568a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fa9afe1109ce42ad1204409f7ca2552857d9bc1f3ed394613221ab7baeb568a
Size

116KB
MD5

058c5bd1f5d74c06ff9df768b433c700
SHA1

228d0fcaad9fd5b5974de9f30867edc7bb022180
SHA256

1fa9afe1109ce42ad1204409f7ca2552857d9bc1f3ed394613221ab7baeb568a
SHA512

434352c2bb90eb1370347be3433bc0e3fd9a34afbc7fd86dd8813cc7c08e3cad0b3702ed6953d33c0048d7cc6651844d632057003eb0b1c969d81109ec61837f
SSDEEP

3072:CLI1wc8DXaTLgLZ2wxdV9QoTl7sG/ZkSFvENz:upuTsLZ2elYG/6SREV

Score

N/A

Malware Config

Signatures

Files

1fa9afe1109ce42ad1204409f7ca2552857d9bc1f3ed394613221ab7baeb568a
.exe windows x86

be97cd341f2adc0ad17d908a5338dbae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeLabelW
GetACP
DeleteFileA
GetStringTypeW
GetModuleHandleW
GetConsoleAliasA
CreateMailslotA
CreateSemaphoreW
DeviceIoControl
GetShortPathNameW
CreatePipe
LoadLibraryA
DeleteFileA
VirtualAlloc
SetEnvironmentVariableA
InitializeCriticalSection
SetCurrentDirectoryA
GetStringTypeA
WriteConsoleW
CreateFileMappingW
FatalExit
GetProcessHeap
DeleteFileA

mshtml

ShowHTMLDialog
ShowModelessHTMLDialog
DllEnumClassObjects
ShowModalDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE