67db0212fea2220c62a821045469a14a4ecabfaab6435e450915b506edbeac6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67db0212fea2220c62a821045469a14a4ecabfaab6435e450915b506edbeac6d
Size

132KB
MD5

e282fafa0efdbe0cd309e348ac09a477
SHA1

327cb79d061cedf288889ad777c052190f22f6e7
SHA256

67db0212fea2220c62a821045469a14a4ecabfaab6435e450915b506edbeac6d
SHA512

62a0a9f5ea6e5f3ef93172e1ffa413025ed6ab9c0c7888eed1059329c008951eddf0dca28829695aafff17e64c220251e280197bc71d5c2a3a9ecc85412188fe
SSDEEP

3072:NjMvmZGaxd5bFH5g6OiZSxarxr2v00KiYDtVYdjK8OtDVY+6PTRRZPaY:lMvmfT5p5sAnN5D7YzOtJyPTRRda

Score

N/A

Malware Config

Signatures

Files

67db0212fea2220c62a821045469a14a4ecabfaab6435e450915b506edbeac6d
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE