dd2839dba9dbed45034dc796df4b94f14eec18b9bb447865811011930c8eb239 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd2839dba9dbed45034dc796df4b94f14eec18b9bb447865811011930c8eb239
Size

132KB
MD5

aff8cdae65598ac2409352c9ba38e3f6
SHA1

18ec154043f04b72f59cf66325c0c23c68e9fbe5
SHA256

dd2839dba9dbed45034dc796df4b94f14eec18b9bb447865811011930c8eb239
SHA512

b8724719095801c2582e4e720eec28b26108c6775f5fd826fae8548773324290e46200d26b266b827c7d277b0fe153b9b7b95f14c195ff9be1092c35648fce0a
SSDEEP

3072:KesvEWbPMGXwXHLm52jd8n83MS6CiLgxYWcw:qsWDLXcHC5KdlMS8gY

Score

N/A

Malware Config

Signatures

Files

dd2839dba9dbed45034dc796df4b94f14eec18b9bb447865811011930c8eb239
.exe windows x86

b8a0e1c2b5924610b8047f50bb1e53c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strrchr
tmpnam
wcsspn
strcspn
wcstombs

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE