b06c4ec39ebc62a03aaf4907cebc064a5795918ccef93a8714341f49de1cbef4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b06c4ec39ebc62a03aaf4907cebc064a5795918ccef93a8714341f49de1cbef4
Size

132KB
MD5

c34056de448d2679b6a9b3d301baf7a1
SHA1

35396c04330ebec9b9b1ba139a274375f177a982
SHA256

b06c4ec39ebc62a03aaf4907cebc064a5795918ccef93a8714341f49de1cbef4
SHA512

8935d5ce302b1d419cba90cff03a790d7d058f5f379064e463e42120eab58fa5ea31ef2a401ae5f56374a7b55e97d80c25472958d251143b7f0c6701570f6d77
SSDEEP

3072:SQwttT4hbSaXe6Y+ogMJT7cG76aOdRLm4EDHc:4Y5nvodTYHa4PE

Score

N/A

Malware Config

Signatures

Files

b06c4ec39ebc62a03aaf4907cebc064a5795918ccef93a8714341f49de1cbef4
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE