8e9bb8c90d1f01b81af7965bc6b6128fbcaa6ae5d2ee408a9bb92f5719496093 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e9bb8c90d1f01b81af7965bc6b6128fbcaa6ae5d2ee408a9bb92f5719496093
Size

13.5MB
MD5

96affd85181aaa0369527e3db391791b
SHA1

333a8199128d796ce4dfc5e61371a2a9de5b9b24
SHA256

8e9bb8c90d1f01b81af7965bc6b6128fbcaa6ae5d2ee408a9bb92f5719496093
SHA512

607acbbc6719d307a6ab9dc8f10d1b1abbbecb7f80137a0b998d9bbfbf32ec4a3d1aad0f743602cb54e7e18c6aba8e9799214a36028ce0485592bfce201e2a7c
SSDEEP

393216:JBV2CcZa8TEFmyEfXGf1bPmk81rqSGY+1Lu5YpMi:8fa8TEUyFbhQu0+1Lu5Yp/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e9bb8c90d1f01b81af7965bc6b6128fbcaa6ae5d2ee408a9bb92f5719496093

Files

8e9bb8c90d1f01b81af7965bc6b6128fbcaa6ae5d2ee408a9bb92f5719496093
.exe windows:4 windows x86

755c0e5fdeeb9d8da4a6e2654f186c4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiOutPrepareHeader

ws2_32

closesocket

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

CreateDCA

winspool.drv

DocumentPropertiesA

comdlg32

GetSaveFileNameA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoRevokeClassObject

oleaut32

SafeArrayUnaccessData

comctl32

ImageList_Read

oledlg

ord8

Sections

.text
Size: 3.6MB - Virtual size: 24.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE