bb844a64ece0a9ac041f642d46408595042e447874f97eb23f87ab3d88384801 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb844a64ece0a9ac041f642d46408595042e447874f97eb23f87ab3d88384801
Size

132KB
MD5

c4f598ea3545c122f986d759326e376f
SHA1

546605a3de50ecc07249b31e94b4ddfdc5593d04
SHA256

bb844a64ece0a9ac041f642d46408595042e447874f97eb23f87ab3d88384801
SHA512

e40beccef230bd14f6ccb7353d0b7bc049fcd24173e95ecf1f042312ba687e37c88d4b7a93b33c9bdc5fc054997a3a9122d80225a76eeb3fa7cc56da039ddc72
SSDEEP

3072:BAG2QhXtyiFPubv6lFWL2roGbuy7FRkHwu/:BA2pH2v3XSPRkH5

Score

N/A

Malware Config

Signatures

Files

bb844a64ece0a9ac041f642d46408595042e447874f97eb23f87ab3d88384801
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE