fd549aafbd957940da49df7b8373f6ffe781dff6b4ee1d8aed8ff886494bcc19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd549aafbd957940da49df7b8373f6ffe781dff6b4ee1d8aed8ff886494bcc19
Size

132KB
MD5

457767801901166499746b1ed51d514a
SHA1

24bca722f583785ef8cea8b5ad29f7af01e0c2fe
SHA256

fd549aafbd957940da49df7b8373f6ffe781dff6b4ee1d8aed8ff886494bcc19
SHA512

64e08df2c609c504769b2211962f0d413cab84ece1959333433db29169fb300889b10601b48b68ed5d4a6b144a55d7bce445e536da513c3b5aaad11208ec8e31
SSDEEP

3072:yl5JHvaXAHh+JIRcCa4CS3DL8x6UVI/LKTP7i:/XABeIM0n8gUVI/i7

Score

N/A

Malware Config

Signatures

Files

fd549aafbd957940da49df7b8373f6ffe781dff6b4ee1d8aed8ff886494bcc19
.exe windows x86

dc1c3237df6344d7d429b31268052112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

SetSoftwareUpdateAdvertisementState
DllUnregisterServer
FaultInIEFeature
IsValidURL
Extract

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE