dbce985f9dc6fa2f2a3b165b8c0bb2fd0407c887255c143fa3b92c62149bab5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbce985f9dc6fa2f2a3b165b8c0bb2fd0407c887255c143fa3b92c62149bab5d
Size

11.5MB
MD5

5a722c22ecc00df9eecfea6de779b163
SHA1

14058a89f4654f416ace7ca913585a8b6323c1d1
SHA256

dbce985f9dc6fa2f2a3b165b8c0bb2fd0407c887255c143fa3b92c62149bab5d
SHA512

5f5af0e42453e5261af240fcb0c3774ca4f89e1d0fbe745dc008d2f756ee1ac00e9bd2a03c6ffdab347c9621bb4b28b07192e262c65fe440bac66315c35334c7
SSDEEP

196608:PbaA3tsDEj9b1ZnL/QwGPI4HmpAivsAqlp66cFJswgFjUItb4eZFsezX:jB3tsIj95ZZGPI4tbAo6hWwUbBFsezX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbce985f9dc6fa2f2a3b165b8c0bb2fd0407c887255c143fa3b92c62149bab5d

Files

dbce985f9dc6fa2f2a3b165b8c0bb2fd0407c887255c143fa3b92c62149bab5d
.exe windows:4 windows x86

755c0e5fdeeb9d8da4a6e2654f186c4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiOutPrepareHeader

ws2_32

closesocket

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

CreateDCA

winspool.drv

DocumentPropertiesA

comdlg32

GetSaveFileNameA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoRevokeClassObject

oleaut32

SafeArrayUnaccessData

comctl32

ImageList_Read

oledlg

ord8

Sections

.text
Size: 3.6MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE