ac9d72f7a56e7988a4818f60c1d44fa903095b817baf26dbe93d0433c87e37ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac9d72f7a56e7988a4818f60c1d44fa903095b817baf26dbe93d0433c87e37ac
Size

132KB
MD5

190b7df5f6d2dff7327cd3dcf34f0ffc
SHA1

bad3763b872215ef7ccd07218e66517fa456cb0d
SHA256

ac9d72f7a56e7988a4818f60c1d44fa903095b817baf26dbe93d0433c87e37ac
SHA512

f51d761c92c722bac98fcaa4b8c881431ddcf222e10d63dcf6e9ebaaa8e61a5a609358b3d78b6d1e6a4cf4b00f789e7c65e7154613d46ff2197206a88530d022
SSDEEP

3072:O+rbanQtk7ndfsZpBD8nw6NJnbu6p5vwWdqVx0:O+Hb6GXYBNRu6DvfqV

Score

N/A

Malware Config

Signatures

Files

ac9d72f7a56e7988a4818f60c1d44fa903095b817baf26dbe93d0433c87e37ac
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE