60164898345fda1005e351d107775ebb37c75f95004264c85bd7da6889b926af | Triage

Sharing

General

Target

60164898345fda1005e351d107775ebb37c75f95004264c85bd7da6889b926af
Size

199KB
MD5

07ecb8635f3ea7c5554d48f084ae790e
SHA1

d90241b06013a1b5bca71dceed4f09ab0f4c9816
SHA256

60164898345fda1005e351d107775ebb37c75f95004264c85bd7da6889b926af
SHA512

758dd2ad43343327c5aea0d38781f50b509c3380a0e7ba84da2c8ddfacd4d0902012afe3891fd2aac7a07d0a71bb86ae8e6c9fdd9684f807a8d92a59d06b2e70
SSDEEP

3072:5rF/26F+xr9cF+74v4yp0x2jmL5gXEZrmnfivsN/jeJ/O54HCn/4zLfj:5ro6OhTdyefLx5mfMicRHC/4zLfj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60164898345fda1005e351d107775ebb37c75f95004264c85bd7da6889b926af

Files

60164898345fda1005e351d107775ebb37c75f95004264c85bd7da6889b926af
.dll windows x86

3cb73d071e2284a3a4cbd1ece2a2408a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegCreateKeyExA

wininet

InternetGetConnectedState

winmm

mmioOpenA

comctl32

InitCommonControlsEx

user32

SetCapture

gdi32

CreateCompatibleBitmap

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

Exports

Exports

winampDSPGetHeader2

Sections

.text
Size: 192KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE