de98233204262ed55ab78da5888ba5594346e7d83b51583e6d0af9e27163db37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de98233204262ed55ab78da5888ba5594346e7d83b51583e6d0af9e27163db37
Size

132KB
MD5

b08acf703f802bdae6060b8ff56ed58c
SHA1

1e5dd4ca9b42addfa022292cd96430691bdabdac
SHA256

de98233204262ed55ab78da5888ba5594346e7d83b51583e6d0af9e27163db37
SHA512

992e43a609f1befa32f24a58ff5fbd241c1bdc0d0f799e17a195cddab7a90c523a1ae957dcdbfc4b98dd90644b428a0d6c055ed552b82780ef1dd3fb5a68ff20
SSDEEP

3072:C9Xu7fsWjMTCcVVctUWbjoCrYSvWConsduoseFW8:yXuGCaVv4jvmnsdlses

Score

N/A

Malware Config

Signatures

Files

de98233204262ed55ab78da5888ba5594346e7d83b51583e6d0af9e27163db37
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE