9cdf73b9c43c7bf9f96bf92e6834df87d6ceb77ffbdb98d78b7250068dc98d22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9cdf73b9c43c7bf9f96bf92e6834df87d6ceb77ffbdb98d78b7250068dc98d22
Size

132KB
MD5

21aee95cdead6f0399ba4ca8c7a52530
SHA1

aa682cf4f6d441d4f16303575844aaa326d11d37
SHA256

9cdf73b9c43c7bf9f96bf92e6834df87d6ceb77ffbdb98d78b7250068dc98d22
SHA512

3a881cd8db06fe4c5650b6ea576bd4f4133e6cd25bd962017b398d0628934575c257c743c20d36f076c029971a979d35ed13a56bb0a125dface3eb995de8e5a6
SSDEEP

3072:+QYC+PavsRG/fZfUuldicUEV0Yti1TPEj/2:2C+PaOIfZfeXEVe1Tm

Score

N/A

Malware Config

Signatures

Files

9cdf73b9c43c7bf9f96bf92e6834df87d6ceb77ffbdb98d78b7250068dc98d22
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE