94079d5ee88bbf675611dcdc24e960bdf3ffd052c0b5699b45b17c206ad422d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94079d5ee88bbf675611dcdc24e960bdf3ffd052c0b5699b45b17c206ad422d1
Size

132KB
MD5

1bf7a338c8ab75304470826792f5a857
SHA1

5ecbbf8aec663716058d4a14175cca8434d3cb0e
SHA256

94079d5ee88bbf675611dcdc24e960bdf3ffd052c0b5699b45b17c206ad422d1
SHA512

0ec20a19dfba9a1f6878acf3930068259f4c5bbb374db2c95166fd694ac3748cbdbe3552150092619a2111af198aa1b88e3e1a292841e61a8236f0b0f17005ab
SSDEEP

3072:XEuL8G8ivbiTjnXf68bxeSpOjt67IYh2RQu59XBWB95ZVu:XdLsigP68bxxEjc7I1Qke9Z

Score

N/A

Malware Config

Signatures

Files

94079d5ee88bbf675611dcdc24e960bdf3ffd052c0b5699b45b17c206ad422d1
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE