ff979100b410deb443a34db5522348cac4a231636572679431defd9b4db93f4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff979100b410deb443a34db5522348cac4a231636572679431defd9b4db93f4b
Size

132KB
MD5

9f9e980a91b45b588e8ad806875dea9d
SHA1

7a3cd193480f1433f1dc99c7c9a3b1df027a7aaa
SHA256

ff979100b410deb443a34db5522348cac4a231636572679431defd9b4db93f4b
SHA512

3bf65b6a26516ce78bd51957473face11993aeb0eb958dcbbc1c55fb954e6c72cba14427d3f82dea9f3f3b136c004a57d097eaf3017ab04c813ad2bebe91db44
SSDEEP

3072:jhMfFmjEHby1lZXzolgWXdU9AJYFQCRLTzqK13kK6rsZb4a1Z78/Bbimj:+wjEofX81U9BQS3eKp6r24aQ/

Score

N/A

Malware Config

Signatures

Files

ff979100b410deb443a34db5522348cac4a231636572679431defd9b4db93f4b
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE