6bd40107bc82b05424d64bf65fef81a5be9b9d5736031067e830e6bf2d6cabaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bd40107bc82b05424d64bf65fef81a5be9b9d5736031067e830e6bf2d6cabaf
Size

132KB
MD5

0718827b1412ee3af19f7c9c04146e22
SHA1

923079c15922567b0f6fab881d62121c4c1a92bc
SHA256

6bd40107bc82b05424d64bf65fef81a5be9b9d5736031067e830e6bf2d6cabaf
SHA512

31494e1556b09f794857c3b16114c9b486e1f2022e11c0bca06b0177bc9b78e4f9b3ccf4b5027d655ed690a4afbe990ced8b890f3987f61fb325587d620a3a31
SSDEEP

3072:ilpiA8nsqK2U5oTvxHEHtPkdpkMRVQ6qH:ilpihsV2FTZHoJmpZVQ6q

Score

N/A

Malware Config

Signatures

Files

6bd40107bc82b05424d64bf65fef81a5be9b9d5736031067e830e6bf2d6cabaf
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE