e1360eb7a073d30fdac345161af6fd7d35350ced1e57bd4cff34a3a33dacb977 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1360eb7a073d30fdac345161af6fd7d35350ced1e57bd4cff34a3a33dacb977
Size

11.0MB
MD5

27fa45a5d3396e5d3289e4a52050fe53
SHA1

1807f78fc73d979a6535a2c9f01e151d9d0931a8
SHA256

e1360eb7a073d30fdac345161af6fd7d35350ced1e57bd4cff34a3a33dacb977
SHA512

00208deb19475e689b67484b46b4250cddf59db530a424a468843f20b978fd0f009554342871571d5a3d33574ad678946770b8efd5377f118882cf6df586d101
SSDEEP

196608:PbaA3tsDEj9b1dTL/QwGPI14Ud/tdirv7ZF1KdnFpOnD6bMyaX:jB3tsIj95dVGPI14UXdiXJKvon4e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1360eb7a073d30fdac345161af6fd7d35350ced1e57bd4cff34a3a33dacb977

Files

e1360eb7a073d30fdac345161af6fd7d35350ced1e57bd4cff34a3a33dacb977
.exe windows:4 windows x86

755c0e5fdeeb9d8da4a6e2654f186c4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiOutPrepareHeader

ws2_32

closesocket

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

CreateDCA

winspool.drv

DocumentPropertiesA

comdlg32

GetSaveFileNameA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CoRevokeClassObject

oleaut32

SafeArrayUnaccessData

comctl32

ImageList_Read

oledlg

ord8

Sections

.text
Size: 3.6MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE