a381b816a490e1ae83385dcd3cfea6d229484469c20c56e50df122609afcfe6b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a381b816a490e1ae83385dcd3cfea6d229484469c20c56e50df122609afcfe6b
Size

132KB
MD5

8844f881bbed26059d3e27d9fd6d0780
SHA1

28366aba3740906a72f40f177731fb6ed787cf9e
SHA256

a381b816a490e1ae83385dcd3cfea6d229484469c20c56e50df122609afcfe6b
SHA512

cf13a2444b96d8264a1312e315b9256668be5ebaf5ffb47b688042ac2452cf8db23c34760b581f2b410f73cf8c71cbc840f66461cac3754bf8f68ce748cb140a
SSDEEP

3072:1YIkcbsFOYmasqImmseG3l27iLkbxxqA3SPQpD+w:1lKFOrvqZs+YbLqARpD

Score

N/A

Malware Config

Signatures

Files

a381b816a490e1ae83385dcd3cfea6d229484469c20c56e50df122609afcfe6b
.exe windows x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE