91a30c4be4b750fbc7956e18d5aea164e1faac5b7d256f0b0697b39e477c9999 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91a30c4be4b750fbc7956e18d5aea164e1faac5b7d256f0b0697b39e477c9999
Size

132KB
MD5

0d5d4488d4f1c928486b10f1693a42f3
SHA1

1abd2e25491c1bfb65986445171f5819e5d91aab
SHA256

91a30c4be4b750fbc7956e18d5aea164e1faac5b7d256f0b0697b39e477c9999
SHA512

c4e5144cb36cff3484e77766111eb1acdbd3c2716ec5a14c1ba1da49f973a56f8dc04c9a95e738af0a50f5bdf113d5923e35afc00007798ec33a2e3208f8c405
SSDEEP

3072:sEDcfdQhgi61LU6T6CxNC6zJVmGMHBs0NzefKAv8gC:SfdQiDFRmCxP3iHBs0NzeKAva

Score

N/A

Malware Config

Signatures

Files

91a30c4be4b750fbc7956e18d5aea164e1faac5b7d256f0b0697b39e477c9999
.exe windows x86

b8a0e1c2b5924610b8047f50bb1e53c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strrchr
tmpnam
wcsspn
strcspn
wcstombs

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE