5c8626f5fa3829c9a65356f375d7aa87860388cf36d9647ca56f51fdb5b6caa8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c8626f5fa3829c9a65356f375d7aa87860388cf36d9647ca56f51fdb5b6caa8
Size

1.1MB
MD5

c8594815639796e6bbffc684c9219353
SHA1

63267493a2e975c3b3537676a404f1054a08fc15
SHA256

5c8626f5fa3829c9a65356f375d7aa87860388cf36d9647ca56f51fdb5b6caa8
SHA512

b8811123b47a1b6d0abdb16d93bc1588a504d391401bd07a4d97072e6f4ea488d20ebde8265a7d2662ecf891db4c00f1dcc868221ef8e2cceb713812122a4771
SSDEEP

24576:BlrgzhiiioLuHLerQvX5gzp5WyNcpoPuxVkekwHtTPQ8bok+X:BlEV1iSureXHWyNjPMGAtrQ8boH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c8626f5fa3829c9a65356f375d7aa87860388cf36d9647ca56f51fdb5b6caa8

Files

5c8626f5fa3829c9a65356f375d7aa87860388cf36d9647ca56f51fdb5b6caa8
.exe windows x86

fe9409cde0186ace3eef69655ba3370f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExA

avifil32

AVISaveOptionsFree

comctl32

ImageList_SetIconSize

comdlg32

PrintDlgA

gdi32

UnrealizeObject

imm32

ImmGetVirtualKey

msvfw32

DrawDibRealize

ole32

CreateStreamOnHGlobal

oleaut32

SafeArrayPtrOfIndex

shell32

SHGetSpecialFolderLocation

user32

mouse_event

version

VerQueryValueA

winmm

waveOutGetNumDevs

winspool.drv

OpenPrinterA

Sections

CODE
Size: 1.1MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE