5615e3d18b17b2df3123aca565d7caf6b46902d28238ccafc8d38ea56b952be2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5615e3d18b17b2df3123aca565d7caf6b46902d28238ccafc8d38ea56b952be2
Size

304KB
MD5

0d4ab0d6f112948adb7fc6abec31a7b0
SHA1

b4e8cd666862aaef3f4a0984429acf3e9efb8f9b
SHA256

5615e3d18b17b2df3123aca565d7caf6b46902d28238ccafc8d38ea56b952be2
SHA512

d890b07d5018839f3e8a5cda63d37289416a5f9f346bb36860bdd8265c2fcd4c5a22a4120b83562c944490c95c41312a0dfb0c59916867246c90da54f146431f
SSDEEP

6144:63nBlu1GTJsAOVnfjllocBN7Iz8dCTLV3Nw27Hujp4:6/u4CxrllpBNqF77HuF4

Score

N/A

Malware Config

Signatures

Files

5615e3d18b17b2df3123aca565d7caf6b46902d28238ccafc8d38ea56b952be2
.exe windows x86

d08b3ea4838306e77ad5addfc389d80b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
GetStringTypeW
Sleep
GetModuleHandleA
WriteConsoleA
GetModuleHandleW
CreateFileMappingW
VirtualAlloc
GetShortPathNameA
DeleteFileA
FatalExit
DeviceIoControl
DeleteFileA
DeleteFileA
InterlockedExchange
GetProcessHeap
SetVolumeLabelA
CreateSemaphoreW
GetCurrentDirectoryW
CreateEventW
CreatePipe
GetACP
InitializeCriticalSection

mshtml

DllCanUnloadNow
PrintHTML
ShowModalDialog
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avdr
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ