adfd8ff05b68528721921f2dcd3a6edc201935eec49dfb20f6e05578739eefdb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adfd8ff05b68528721921f2dcd3a6edc201935eec49dfb20f6e05578739eefdb
Size

132KB
MD5

ca65473acd8d90cf678e42eb89892030
SHA1

a2f19b222c73d0506516eda6dade54dd88bec70a
SHA256

adfd8ff05b68528721921f2dcd3a6edc201935eec49dfb20f6e05578739eefdb
SHA512

88462b8312f26cb03e71c6726e2db89c8bb07f4cf2b82439356c86548886f7e95160f1cf8610b85e0529dd15593daf125f085ee5d9efecd0e177bbe411c95405
SSDEEP

3072:2lzKDcmLRC5Dy0EtkZnDqhkYcGQ6q5pl2ru3Q5o:emDNtChBDqh2x6qzl2ru

Score

N/A

Malware Config

Signatures

Files

adfd8ff05b68528721921f2dcd3a6edc201935eec49dfb20f6e05578739eefdb
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE