b54d28751db9c4af21e561985084544e646aa29ebe213c9c8bcba86593910619 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b54d28751db9c4af21e561985084544e646aa29ebe213c9c8bcba86593910619
Size

132KB
MD5

7cc5ed347aace52b94ac5532ad9b2149
SHA1

1ccb0a6129a107f7f9b814facdfb1e7758dc67a7
SHA256

b54d28751db9c4af21e561985084544e646aa29ebe213c9c8bcba86593910619
SHA512

be79359a6b612d05484156a31cb66f6635def14fff051c4f74bf9b8172a4580f564695b3ffd89651fc96e3b7606f51b22d5110f34bad33ead0e8e78b11bd7072
SSDEEP

3072:Pun3gQrA7StD1NuyRLuihh4dHc1/81wtzyjPe:Pc3gQc7SPNuyRiimW8et

Score

N/A

Malware Config

Signatures

Files

b54d28751db9c4af21e561985084544e646aa29ebe213c9c8bcba86593910619
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE