cb2ffb5853fe7fa361dfeed284751d40316c3779444ae584c90ce125aafd0dde | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb2ffb5853fe7fa361dfeed284751d40316c3779444ae584c90ce125aafd0dde
Size

132KB
MD5

4eec71540eff983c673647ad1aa87adf
SHA1

7c5396560e0c67a986b22a21c46d9759faa0f54f
SHA256

cb2ffb5853fe7fa361dfeed284751d40316c3779444ae584c90ce125aafd0dde
SHA512

80761b3f8a837f9ad86de1e3089d776995cecf004bf695770bcdd9c5a4c33b75aa68015508a53d71cee8631ed909b3c9334fe0e2b3e746bec99d458900470201
SSDEEP

3072:Nni63RvJJ+EmZGV8nfryXy3T9j7tTk4vQK7oqOkY1J5gx+RAJ:NR3RRkE8kcyi3xj7t44vXo3+x+R

Score

N/A

Malware Config

Signatures

Files

cb2ffb5853fe7fa361dfeed284751d40316c3779444ae584c90ce125aafd0dde
.exe windows x86

dc1c3237df6344d7d429b31268052112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

SetSoftwareUpdateAdvertisementState
DllUnregisterServer
FaultInIEFeature
IsValidURL
Extract

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE