a2d308fb4af8633c21d87ff258dbe63b620830ca255a780a5eaade90060711f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2d308fb4af8633c21d87ff258dbe63b620830ca255a780a5eaade90060711f1
Size

198KB
MD5

39eecaa206f14b86c37987d6e5c6d38e
SHA1

f37e2431c47b6c8bfc603fcd237861b388b6d7fd
SHA256

a2d308fb4af8633c21d87ff258dbe63b620830ca255a780a5eaade90060711f1
SHA512

bdf8d4843bf45bfd23ada778ae3b4d4ef87665fe138e7eba2f13b598148a3776d1de762b86af78ffe481209dcb5ee9798333febe9a8ab84fd2ed902fbe76b3df
SSDEEP

6144:R4F6BJgHpUYNGfVRQpo8afpIw8u0lPL5w+sgc02Kx:J7gHpBNG/ozw10Rsb0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2d308fb4af8633c21d87ff258dbe63b620830ca255a780a5eaade90060711f1

Files

a2d308fb4af8633c21d87ff258dbe63b620830ca255a780a5eaade90060711f1
.dll windows x86

249b1dbb5a62d6a0bab366bd08392cd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetPropA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

gdi32

PtVisible

winspool.drv

DocumentPropertiesA

comdlg32

GetFileTitleA

winmm

PlaySoundA

ws2_32

WSAGetLastError

comctl32

ord17

Exports

Exports

winampDSPGetHeader2

Sections

.text
Size: 189KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE