6fd84565c12703bb726c1906e25638e6c036e8818376a15822f18558172a88cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fd84565c12703bb726c1906e25638e6c036e8818376a15822f18558172a88cc
Size

42KB
MD5

ee17c9f3f9dd18e30c3d22c610f26727
SHA1

e82f6239fcf69ea4d59434bf268ad729c70a8b97
SHA256

6fd84565c12703bb726c1906e25638e6c036e8818376a15822f18558172a88cc
SHA512

98f8d56a309d342f873f4f9364ca9ef943eb0a428df9296f9ead05692db977e1056b69049b641a94cca7a81372233b7834a42b55eb789888e33452767accaf8d
SSDEEP

768:72Lvl4hdO1fFGR0iztNOicCLxzbzvDsyWj6lJPp39bZP+8v7:7kN1fA/33cCLBLs56Pb9+8v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fd84565c12703bb726c1906e25638e6c036e8818376a15822f18558172a88cc

Files

6fd84565c12703bb726c1906e25638e6c036e8818376a15822f18558172a88cc
.dll windows x86

e25f84875e45cf7ba7f06b2a8b5acfec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

timeGetTime

mfc42

ord825

msvcrt

??1type_info@@UAE@XZ

user32

GetCapture

gdi32

GetTextMetricsA

comctl32

_TrackMouseEvent

ole32

CreateStreamOnHGlobal

olepro32

ord251

oleaut32

SysStringLen

gdiplus

GdipGetImageHeight

msvcp60

?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXID@Z

Exports

Exports

CreateVideoWindow
ReleaseVideoWindow

Sections

.text
Size: 34KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE