00f0477fad3cdd7db2c4da55db750bc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00f0477fad3cdd7db2c4da55db750bc3
Size

1.1MB
MD5

00f0477fad3cdd7db2c4da55db750bc3
SHA1

17a687f15290d6520e769f961332810e3a2f9f9e
SHA256

a1c2d3795eaccef04178cd25ab57b3d69f95c45ce0fc0e1108fa697972d7576b
SHA512

246642daa51c707aea6ce3cfa6a96a7298fe443e46d525758e6f9cc1a11dfa69aa4893036529611d32af5131cb8bf6324cbaab4d618b36b74902142e68589dab
SSDEEP

24576:IrGmyRFY+SM+KLXI84D1Q3VAVt5LCVarrYVsucVktDZDjObimP:pHFsM+qSD1CVcaarUCucVYDBjObB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f0477fad3cdd7db2c4da55db750bc3

Files

00f0477fad3cdd7db2c4da55db750bc3
.exe windows:5 windows x64 arch:x64

48e414e431433a62713440d22abb8343

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wsock32

gethostbyname

winmm

mixerOpen

version

VerQueryValueW

comctl32

ImageList_Create

psapi

GetModuleBaseNameW

wininet

InternetOpenW

user32

GetDC

gdi32

BitBlt

comdlg32

GetSaveFileNameW

advapi32

RegCloseKey

shell32

DragFinish

ole32

CoGetObject

oleaut32

SafeArrayGetLBound

Sections

.MPRESS1
Size: 1.0MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE