dfedb7a30e11cb7b21def8a3ceda01bbdfa6d3c326242bbdca1c17ad042c23d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfedb7a30e11cb7b21def8a3ceda01bbdfa6d3c326242bbdca1c17ad042c23d9
Size

132KB
MD5

1073e659f9d908d627f34c8a8b6f393f
SHA1

153fca74cc93dfdfa54e92dc4d3c237028735314
SHA256

dfedb7a30e11cb7b21def8a3ceda01bbdfa6d3c326242bbdca1c17ad042c23d9
SHA512

fb5a24ceec7e9aa4b761704d2762ce8c720a0d796aa834846591b81e93c1f6e63e5755fc8cef76cadc63d4ed095f34ff88b9270611dc0d2ff96f2404423ec8db
SSDEEP

3072:MqKrBxlMRaUFwrv+jyxyMXd74AgWfLSaFEDqIyPP43dqdWa+:wxSYUoHXd7rf+zDVEtsa

Score

N/A

Malware Config

Signatures

Files

dfedb7a30e11cb7b21def8a3ceda01bbdfa6d3c326242bbdca1c17ad042c23d9
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE