ffd5d6a51c990c32a7a606d7154fe4b7c9e174418a48c445b0e99969770673f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffd5d6a51c990c32a7a606d7154fe4b7c9e174418a48c445b0e99969770673f4
Size

132KB
MD5

38ad55b92cfd60a5b4b353c7b97bfcb5
SHA1

c14882d0e1bd2de531a3e7c7cc77e2d0fe38eb33
SHA256

ffd5d6a51c990c32a7a606d7154fe4b7c9e174418a48c445b0e99969770673f4
SHA512

401f094aaae1d61c8bc84ad610d0eaa42be70e285efce52c2c8085dcbbd745ea8087e92bd28a6a1189abde12ff7e7794fbfa26387a1066851f44bdd1ee0e9f8a
SSDEEP

3072:EUqXQunabDbI2zRq8cvUNnMKhsn9wiQqUc4unrRoE42sAHCxX:EXNavDH/h29t5Uc44oEVsAH2

Score

N/A

Malware Config

Signatures

Files

ffd5d6a51c990c32a7a606d7154fe4b7c9e174418a48c445b0e99969770673f4
.exe windows x86

dc1c3237df6344d7d429b31268052112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

SetSoftwareUpdateAdvertisementState
DllUnregisterServer
FaultInIEFeature
IsValidURL
Extract

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE