77509d24d2230d78198e06b8812e61c5129c22a442ab46c9a5b6e42ac4b1c1d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77509d24d2230d78198e06b8812e61c5129c22a442ab46c9a5b6e42ac4b1c1d1
Size

6.6MB
MD5

ebbc4fa0a3069cf28565b02975ee2fdd
SHA1

497b3794afa30b8f23ccbb6af9b5bb72acf5fa7c
SHA256

77509d24d2230d78198e06b8812e61c5129c22a442ab46c9a5b6e42ac4b1c1d1
SHA512

16fe00c56249cbea818768554f47d60528cceb0a595d4f1714084e33bcd5d2dfbb265c11d04cc6573a1c368b5682d274bcb11d1257d4c5e216a34973ffc81a6d
SSDEEP

98304:t7GNtHdX14kdnViIGAYd7tgMSrK3fzeacYVE7FgywaVdwZz4XUXlPRb0YwrOkmkW:Ux1rgfAS73XqF57kuePV0YwrTrw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77509d24d2230d78198e06b8812e61c5129c22a442ab46c9a5b6e42ac4b1c1d1

Files

77509d24d2230d78198e06b8812e61c5129c22a442ab46c9a5b6e42ac4b1c1d1
.exe windows:5 windows x86 arch:x86

ac5253654702104558578f0bba0f975b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

SaveDC

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

ChooseColorA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

SysAllocStringLen

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 5.6MB - Virtual size: 27.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE