2340d783c1f7f2db01f5f46b73464e4755bbfcad2a7bab3f8713fa4d1f738d49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2340d783c1f7f2db01f5f46b73464e4755bbfcad2a7bab3f8713fa4d1f738d49
Size

14.8MB
MD5

19cc8cc5cac305231fc8a42b400a8227
SHA1

f2971e98955038169f2b676faf9920deea91bf42
SHA256

2340d783c1f7f2db01f5f46b73464e4755bbfcad2a7bab3f8713fa4d1f738d49
SHA512

45bfa1c5f39adce2599d96668f10b78de90da93dc87a4a29ca1c783634a70c80a84cc4789f90bebe2c573600bf8ec5bb3e5237f642f70b7740815d3561a12c3f
SSDEEP

393216:WUgknnq5lOfCx5WNS/264t3S7NVbIlrjZZtbDmWt12De:VtfC/WNSut3ShWlrjfMgue

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2340d783c1f7f2db01f5f46b73464e4755bbfcad2a7bab3f8713fa4d1f738d49

Files

2340d783c1f7f2db01f5f46b73464e4755bbfcad2a7bab3f8713fa4d1f738d49
.exe windows x86

29264dc7f280213ceff9dfa9ab6ee25a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

SaveDC

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 4.2MB - Virtual size: 25.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE