67ded0bec2e2e9f0afb34d57459f6c02b15d633cbc767f7a404835831f72b149 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67ded0bec2e2e9f0afb34d57459f6c02b15d633cbc767f7a404835831f72b149
Size

132KB
MD5

ce11ef3c1e0d1e296691907ad9af9105
SHA1

aab1c1d9e699fa9c2d6906246d25985a26706f32
SHA256

67ded0bec2e2e9f0afb34d57459f6c02b15d633cbc767f7a404835831f72b149
SHA512

1efd5db54a1a86fddfc723221229c640c412528d86b022407814d7402d82dbd151259b9b4df2622a94d27e6d2dd5df0dd89975d9940037e6165ccf3d7f894b65
SSDEEP

3072:73XN2y9TcZ8D4TSVI86O8p1pp2wA2JRuGlvm+KqE1SNgP:ogTM8D4TSVI8j8p1pp2O7VxxF

Score

N/A

Malware Config

Signatures

Files

67ded0bec2e2e9f0afb34d57459f6c02b15d633cbc767f7a404835831f72b149
.exe windows x86

dc1c3237df6344d7d429b31268052112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

SetSoftwareUpdateAdvertisementState
DllUnregisterServer
FaultInIEFeature
IsValidURL
Extract

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE