b09f54ddd744059ce4ef8f083c23148fee63d7790a86b3413aa71bedd3a2e3f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b09f54ddd744059ce4ef8f083c23148fee63d7790a86b3413aa71bedd3a2e3f6
Size

10.6MB
MD5

370472b82116413c4576116454bb98ea
SHA1

ddd1c099551b3773a6fef0b1c235758208558d72
SHA256

b09f54ddd744059ce4ef8f083c23148fee63d7790a86b3413aa71bedd3a2e3f6
SHA512

34b7d2e717831b3383add26444c5c21a78fb1ba7a4505fe7852005f1cd6208b640068c383faa1a7c0eaf826a1bc61c913468d2c579b2d9b03b0617fcbf835286
SSDEEP

196608:MtKvUCOR11YY7mPON82OLkCO/4BwCiK/z+yAYd+ggLgJaH9jSd9yb+EcflxA0:pUCE1K4CByKaCIVew9ghHd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b09f54ddd744059ce4ef8f083c23148fee63d7790a86b3413aa71bedd3a2e3f6

Files

b09f54ddd744059ce4ef8f083c23148fee63d7790a86b3413aa71bedd3a2e3f6
.exe windows:4 windows x86

29264dc7f280213ceff9dfa9ab6ee25a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

SaveDC

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 5.5MB - Virtual size: 27.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE