ec922d95430c6ae43b7669d6cb241b260200a643eef0454ff412cad8be50095d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec922d95430c6ae43b7669d6cb241b260200a643eef0454ff412cad8be50095d
Size

132KB
MD5

1c92bc22be1dd91b47a3cec5cd946729
SHA1

4eb1a228cba52b13e842b7c4f3e68eab8e7bae55
SHA256

ec922d95430c6ae43b7669d6cb241b260200a643eef0454ff412cad8be50095d
SHA512

eecffde538b649f76b39be5339051c8bd35e7bd19168359dbf3f9131b4c79e20bb2fb6e8b174eec5b53cdbc4c523d5d3546f296fde4153c13d51cec3686e4082
SSDEEP

3072:wV2Mg8n5TSSJUFcCSDS3sBBkO+DmxJffv0lR1UfQ/vNrvFS:wN5T7BS8BBkO1XvezU4/vRF

Score

N/A

Malware Config

Signatures

Files

ec922d95430c6ae43b7669d6cb241b260200a643eef0454ff412cad8be50095d
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE