6d07de9add05ddc3d335e26843475c9a7e0269d1b57c504c3401de6935714e33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d07de9add05ddc3d335e26843475c9a7e0269d1b57c504c3401de6935714e33
Size

11.0MB
MD5

04a8744c0f965b14deb32c519e166c79
SHA1

41b5264fb06afaca82d46722ae2b41026e283aa9
SHA256

6d07de9add05ddc3d335e26843475c9a7e0269d1b57c504c3401de6935714e33
SHA512

b2c0f4d1cc6b8079e37c0f6ac669e594e5f21a75138112b3c9699a3f9be6c51e10b4b1cf932afcc1593c2b81d6759da525f06bb2b8c5ef9e86d2c3c4eb855e7a
SSDEEP

196608:oXOFdUktV6HVBTW3wTqi441v593c4iv9gIRKa3NJb/t9QstUlKAaF/BUri9:ntgHVBuEqi42vjJVId/TQsaC4i9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d07de9add05ddc3d335e26843475c9a7e0269d1b57c504c3401de6935714e33

Files

6d07de9add05ddc3d335e26843475c9a7e0269d1b57c504c3401de6935714e33
.exe windows x86

1674bdafd21d465bb12adb812c98986e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

SaveDC

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

SysAllocStringLen

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 3.7MB - Virtual size: 24.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE