007078afed61f9cb960fbe822b48d913 | Triage

Sharing

General

Target

007078afed61f9cb960fbe822b48d913
Size

383KB
MD5

007078afed61f9cb960fbe822b48d913
SHA1

53c5438a170f8b13c986a28a4e8a1b0ca6827ce6
SHA256

18cd8d504bd11f72d4f35dde2c1147f7a1a590b60d5068a649e3d44c031d2ae4
SHA512

1f1e88417941350c2cdcaf8827dc93a45f50ea9934fa3681b206c5fc591160eecaa38b30c0cdf64c732e24c3862f4a31f719d46baf0b171cbf7c6069ec17ffc2
SSDEEP

6144:E00t6xPzL+8DxjNPrOv0tK8PpF8rWuNP3SCydP4roP4eBRioB5UrYOI48FGhHOYB:46xPzL+8zrOvuK8BE5iCydQhqiorUrlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
007078afed61f9cb960fbe822b48d913

Files

007078afed61f9cb960fbe822b48d913
.exe windows:4 windows x86 arch:x86

267e099df06079dc967ffe05dd081f87

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

comctl32

ImageList_SetIconSize

version

VerQueryValueA

user32

GetKeyboardType

oleaut32

SafeArrayPtrOfIndex

mpr

WNetOpenEnumA

wininet

InternetReadFile

advapi32

StartServiceA

gdi32

UnrealizeObject

msacm32

acmFormatChooseA

avicap32

capCreateCaptureWindowA

shell32

Shell_NotifyIconA

wsock32

WSACleanup

winmm

waveOutWrite

ws2_32

WSAIoctl

Sections

CODE
Size: 370KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

love
Size: 50B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE