b9fbc741bdcad5b7fd8b766807d1caadd581fa7e420e3dd557cce6aa8b81eb75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9fbc741bdcad5b7fd8b766807d1caadd581fa7e420e3dd557cce6aa8b81eb75
Size

132KB
MD5

48015edc9d681c25b0f799ed882416f0
SHA1

b25fb1a3041cce81e54f488a5b463d4a52aa22ac
SHA256

b9fbc741bdcad5b7fd8b766807d1caadd581fa7e420e3dd557cce6aa8b81eb75
SHA512

a4c2f8ee7d311a355ab75d0eede261cca46c3e11d2e21f457abbfaa032729ef19621f08ea1f555c7cac5c0fb4b9158c0b646b541894d619512038a6c6fa45693
SSDEEP

3072:7uEVJWDPphlTDjlrK95/UA/IqAK/oMLFvphY:KEV4PBTNe9xt3tj

Score

N/A

Malware Config

Signatures

Files

b9fbc741bdcad5b7fd8b766807d1caadd581fa7e420e3dd557cce6aa8b81eb75
.exe windows x86

b8a0e1c2b5924610b8047f50bb1e53c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strrchr
tmpnam
wcsspn
strcspn
wcstombs

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE