2a2ef07b8a7a79010026109394f00bfed37a2a0bf4b1cedd391801b4fdee3563 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a2ef07b8a7a79010026109394f00bfed37a2a0bf4b1cedd391801b4fdee3563
Size

6.8MB
MD5

17a62972b5d69f2979fc5137efee0397
SHA1

472ff63f2024a16dc2bd815ee0e95709d4743910
SHA256

2a2ef07b8a7a79010026109394f00bfed37a2a0bf4b1cedd391801b4fdee3563
SHA512

e60b55e7d1db14dd2b6ba7828ddc1dc5fc93016a134b944e559d60f1e77fad9fc0fb7be991bdb761aec2bab2828abfecfaeecc4a0d12b143f76eb2b76824a99d
SSDEEP

98304:wVZvKPI7UKH7jFXmNWAOdpVucPl2TH0dwP+pIkI7ylJCrswjdvM/2wtp/XF6zix4:4v+MU475uJ8uT4J8SuapPF8mI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a2ef07b8a7a79010026109394f00bfed37a2a0bf4b1cedd391801b4fdee3563

Files

2a2ef07b8a7a79010026109394f00bfed37a2a0bf4b1cedd391801b4fdee3563
.exe windows:4 windows x86

414ae19222624d1ee616629803858b67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame

winmm

midiStreamRestart

ws2_32

gethostname

rasapi32

RasGetConnectStatusA

user32

GetSysColorBrush

gdi32

RoundRect

winspool.drv

DocumentPropertiesA

comdlg32

ChooseColorA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ord17

wininet

InternetConnectA

Sections

.text
Size: 6.7MB - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE