97afe8bfe9aa086ac57b99ecd99adf59d957e672d7e0d7abdbef7646620c9447 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97afe8bfe9aa086ac57b99ecd99adf59d957e672d7e0d7abdbef7646620c9447
Size

132KB
MD5

90dfea2bac9822ca6630543f8f48c134
SHA1

06e89eac1d125f1f6280bfe6545150e0f27cb4ec
SHA256

97afe8bfe9aa086ac57b99ecd99adf59d957e672d7e0d7abdbef7646620c9447
SHA512

e35e79c91195846b28a7b2b20e25698c2b404d0a4ef09eb275778476f0d6699148ca726a656cf6f55d979d4698908c43f7da795cfd9e133b7d603a881d6992e6
SSDEEP

3072:b8CmlkN7omuvcfPd7AHSmGwF0mnk3tHjq8INKpuDIoOl3JfCc:b87l8omcy+yO1UtHjq8INKwd+

Score

N/A

Malware Config

Signatures

Files

97afe8bfe9aa086ac57b99ecd99adf59d957e672d7e0d7abdbef7646620c9447
.exe windows x86

b8a0e1c2b5924610b8047f50bb1e53c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strrchr
tmpnam
wcsspn
strcspn
wcstombs

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE