c04f2a1259e3aecd8bb42c14bcb70cd3483c2858f2d315b7a5191efc6d3621c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c04f2a1259e3aecd8bb42c14bcb70cd3483c2858f2d315b7a5191efc6d3621c3
Size

7.5MB
MD5

daa5d2bdca42aed7876b5014658d0954
SHA1

7bb94aceddb1b05bf468fc1480df4279f9a79b19
SHA256

c04f2a1259e3aecd8bb42c14bcb70cd3483c2858f2d315b7a5191efc6d3621c3
SHA512

f9fa6f9b059495ace48c0c2cec5e135fcc9fe668f5d7e35da00a90f5ac0751b37573a68c0324edd496f97da2f6484477ff2d04bfa57f9d1c51d32070747d4f76
SSDEEP

196608:jBfufC0RdtuCdrk1B0LI4jl+Fw9uh/QNt/S:xwdrW0M4oF6yQNt/S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c04f2a1259e3aecd8bb42c14bcb70cd3483c2858f2d315b7a5191efc6d3621c3

Files

c04f2a1259e3aecd8bb42c14bcb70cd3483c2858f2d315b7a5191efc6d3621c3
.exe windows:4 windows x86

29264dc7f280213ceff9dfa9ab6ee25a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

SaveDC

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 5.4MB - Virtual size: 26.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE