a8401e8b2dc992221368b63913cbf912859eed3685d086a6e01a8cd95f27412b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8401e8b2dc992221368b63913cbf912859eed3685d086a6e01a8cd95f27412b
Size

132KB
MD5

37a1ff6cb6b4dffc94343cffa3e4c507
SHA1

5f9b137727f46bf6862d1198026d10603f3d4f5b
SHA256

a8401e8b2dc992221368b63913cbf912859eed3685d086a6e01a8cd95f27412b
SHA512

d58f6eaa16f41503e30f295fda640da3de94669a26c02ba00819f3cde24b557b512bfc3708df419a7fae489f771a2f37fc1d7b327da3f46cdd8d0e7002be39c9
SSDEEP

3072:4//ChfnUx3cv6V8nWvJQavNHP6GtXscSLREHd04F8RY5Qltbj3d:4/6Mxsv6V8UQwPjXsxREHnWj

Score

N/A

Malware Config

Signatures

Files

a8401e8b2dc992221368b63913cbf912859eed3685d086a6e01a8cd95f27412b
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE