892ddec15742f43d1e3df0d489c58dfcd57948d30ad897ef439b94a90fa392df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

892ddec15742f43d1e3df0d489c58dfcd57948d30ad897ef439b94a90fa392df
Size

132KB
MD5

a960174fb788b6d130d9db04711de25f
SHA1

7beffd7a742ebfa4bbb2b7f570602972c6a95aa9
SHA256

892ddec15742f43d1e3df0d489c58dfcd57948d30ad897ef439b94a90fa392df
SHA512

16d10a8f8d05fd1daf6c1fb0b0cf77e3a83aa83d5564c831ae2a0adf029a67a883240137d85009615a5a7d46e95397781d54e69bd1e9ea1c67e9c30a1333f928
SSDEEP

3072:xq7QL1Ih8DwDqoBM+Kd5ZVXXHdRL21kc8CV/tUgQnNa7MJhsGlquL:xqQEGw2oB25fXXnLQV/V7sB

Score

N/A

Malware Config

Signatures

Files

892ddec15742f43d1e3df0d489c58dfcd57948d30ad897ef439b94a90fa392df
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE