91896548f38ebc5b8da7dffbb3aad14e1c40206b84bad3daf0b82754f8e68781 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91896548f38ebc5b8da7dffbb3aad14e1c40206b84bad3daf0b82754f8e68781
Size

132KB
MD5

0809e813f5a024ecc5723936beeebc19
SHA1

6fadc3a00b7b021d1ceaf2063dc61115c5ecf355
SHA256

91896548f38ebc5b8da7dffbb3aad14e1c40206b84bad3daf0b82754f8e68781
SHA512

ffd4ba4506f327fda38d786d7ecbc1d2cd78d3790605409d557891ab13ec054a1b474b2021b5f92b0de1d6213d02404665245f0fe1622e93549242076064e4c4
SSDEEP

3072:/GktyznPPvmD58nfiKDB7ICc10EXxjMZFr4OWnfbbKWdg:e6yzPHA58nfi+BECc10Kr9fNd

Score

N/A

Malware Config

Signatures

Files

91896548f38ebc5b8da7dffbb3aad14e1c40206b84bad3daf0b82754f8e68781
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE