11c91aeffe9d84292bb5cde7b33d1ff604245cc8f0bf5e559eee896eb660ba80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11c91aeffe9d84292bb5cde7b33d1ff604245cc8f0bf5e559eee896eb660ba80
Size

14.2MB
MD5

85b90da6dfe2ac2d0fa207a0081e8b66
SHA1

3ab146dd4138398e70763b8389d24e47fa09296c
SHA256

11c91aeffe9d84292bb5cde7b33d1ff604245cc8f0bf5e559eee896eb660ba80
SHA512

7fb6bf8dccd4713dae958ed7cafb587f6ffec62c3193d210af6712315aac3b048fe99714c697de6fad9586a90601528ac752e3ee475e703ca795891b9c860790
SSDEEP

393216:4QcgqyYg7A+yJ05nd9aKCPTuLTtpXNZTKqY:4QVqyYg7+J05ndYTqLTtjZTG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11c91aeffe9d84292bb5cde7b33d1ff604245cc8f0bf5e559eee896eb660ba80

Files

11c91aeffe9d84292bb5cde7b33d1ff604245cc8f0bf5e559eee896eb660ba80
.exe windows:4 windows x86 arch:x86

d95cf526e4bc24e11682159ea04c44cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

MapDialogRect

gdi32

SaveDC

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 4.4MB - Virtual size: 25.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE