90f2afb0b169a3aa8ca581f345b9706ac929d2d6c7fc775da7b576fe9246d764 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

90f2afb0b169a3aa8ca581f345b9706ac929d2d6c7fc775da7b576fe9246d764
Size

12.3MB
MD5

466f3854b17dba708ee892221265e2e0
SHA1

3d53294052ecd6681dc5529c829caf65a3143fd7
SHA256

90f2afb0b169a3aa8ca581f345b9706ac929d2d6c7fc775da7b576fe9246d764
SHA512

2641b56604505fbe26481d4be66adb85f7abfff5454228881c79574f47543b04af7c85f23a14190e6257a05c679112dbcbd379adf914d20ad84117c30d93edf6
SSDEEP

393216:JBV2CcZa8ZXP1uCPAOtPB481rqSGY+1Lu5Y+:8fa8ZdtAOteQu0+1Lu5Y+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90f2afb0b169a3aa8ca581f345b9706ac929d2d6c7fc775da7b576fe9246d764

Files

90f2afb0b169a3aa8ca581f345b9706ac929d2d6c7fc775da7b576fe9246d764
.exe windows x86

755c0e5fdeeb9d8da4a6e2654f186c4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiOutPrepareHeader

ws2_32

closesocket

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

CreateDCA

winspool.drv

DocumentPropertiesA

comdlg32

GetSaveFileNameA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoRevokeClassObject

oleaut32

SafeArrayUnaccessData

comctl32

ImageList_Read

oledlg

ord8

Sections

.text
Size: 3.6MB - Virtual size: 24.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE