d18cc1d0c1fad6d32d1ed15f8d7efe1de7b75bc29266e056933c9e2d9079cbe8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d18cc1d0c1fad6d32d1ed15f8d7efe1de7b75bc29266e056933c9e2d9079cbe8
Size

132KB
MD5

7866e832907c34b852b61e791a5cb5f7
SHA1

7853cfe6a03a4d9bb2c0acf1c28924b4bcc90dcb
SHA256

d18cc1d0c1fad6d32d1ed15f8d7efe1de7b75bc29266e056933c9e2d9079cbe8
SHA512

6a51ef0a236ea869742f215660aadb79a031f41e4fc5155d7abe3a96d5f79af5ff3ce711c83e8fdb77cbc1bb741ac6ce270cc3475036806df836d1b5a8cce5ff
SSDEEP

3072:wO1PTA4LkcBuwWs1Azi5ofDN4eqnRSJM4B7xJXJ4N:wcAUkuW0gNWWXJXJ4

Score

N/A

Malware Config

Signatures

Files

d18cc1d0c1fad6d32d1ed15f8d7efe1de7b75bc29266e056933c9e2d9079cbe8
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE