ef7a94dd81d5fd004115780ba4f813c7520beddf2f1b2569293fc058b1871df6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef7a94dd81d5fd004115780ba4f813c7520beddf2f1b2569293fc058b1871df6
Size

132KB
MD5

19878da02382d4ce8b4c2a8cedfd714e
SHA1

2deb1b35c34d2306973f7100c97245eb6ffff3e9
SHA256

ef7a94dd81d5fd004115780ba4f813c7520beddf2f1b2569293fc058b1871df6
SHA512

353acff52f5d32e5009a7d3c54953276e4a2054ace2c0141a1f44816b5d343837c407f26170f45afba822fe06a2ed5878869ecff233df9a75c48d519563ce453
SSDEEP

3072:uIRCC9RL+wUYvqWgyX+wyFwuZ2PSXIU/1+sh7ZFVNCG:jRn9t+7Yvq0owU/1hhtNCG

Score

N/A

Malware Config

Signatures

Files

ef7a94dd81d5fd004115780ba4f813c7520beddf2f1b2569293fc058b1871df6
.exe windows x86

dc1c3237df6344d7d429b31268052112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

SetSoftwareUpdateAdvertisementState
DllUnregisterServer
FaultInIEFeature
IsValidURL
Extract

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE