6d905e2478d9f0897864f9a7b3adf687a84ded707ab4bea3d594cdbc3417c7e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d905e2478d9f0897864f9a7b3adf687a84ded707ab4bea3d594cdbc3417c7e3
Size

42KB
MD5

8d6d76c626ed7fcebecfc22780fa0b5f
SHA1

bec0694ef0b6c8d8c8c8aa1deecafd6e0f7b3657
SHA256

6d905e2478d9f0897864f9a7b3adf687a84ded707ab4bea3d594cdbc3417c7e3
SHA512

8fad96490fc6dbf8efdc271f6665710366a922cba2709a17f3e58db2bfedc9fd462b48784b529692eab61ac864d5b4de1cfedad427d854265ce4072da4aaf682
SSDEEP

768:12Lvl4hdO1fFGR0iztNOicCLxzbzvDsyWj6lJPp39bZP+Vv7:1kN1fA/33cCLBLs56Pb9+Vv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d905e2478d9f0897864f9a7b3adf687a84ded707ab4bea3d594cdbc3417c7e3

Files

6d905e2478d9f0897864f9a7b3adf687a84ded707ab4bea3d594cdbc3417c7e3
.dll windows x86

e25f84875e45cf7ba7f06b2a8b5acfec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

timeGetTime

mfc42

ord825

msvcrt

??1type_info@@UAE@XZ

user32

GetCapture

gdi32

GetTextMetricsA

comctl32

_TrackMouseEvent

ole32

CreateStreamOnHGlobal

olepro32

ord251

oleaut32

SysStringLen

gdiplus

GdipGetImageHeight

msvcp60

?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXID@Z

Exports

Exports

CreateVideoWindow
ReleaseVideoWindow

Sections

.text
Size: 34KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE