1a79e04607bbb0837eaed48f79680c2f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a79e04607bbb0837eaed48f79680c2f
Size

384KB
MD5

1a79e04607bbb0837eaed48f79680c2f
SHA1

c8d4e2f2a40d4284aaf044b6c59cfd5cbfe00f9f
SHA256

ee80462dc580e50f86110b574032d3247561ad6af147bb08b12d23b2ec85dd36
SHA512

86afd3284b9277e962a5c6b29dbd005964a31cdcd717d3c038c136a3e727ce204777cf4382a3cd8267e35ce75bcf89bb93ed6b78e5f687857c2852e30c8a2756
SSDEEP

6144:WaN0hBeHA5Rye+eTGd3FnqIhq7UzUbbZa6jRs+v1SUKxOyTBbj3qcJaC:WaN0br5meT01dQrbZ7jjgOkhrVJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a79e04607bbb0837eaed48f79680c2f

Files

1a79e04607bbb0837eaed48f79680c2f
.exe windows:4 windows x86 arch:x86

ed19a87a694f06ee4e53565762cbdc3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CreateWindowExA

oleaut32

SysFreeString

msacm32

acmFormatChooseA

gdi32

UnrealizeObject

shell32

Shell_NotifyIconA

comctl32

ImageList_SetIconSize

advapi32

RegQueryValueExA

winmm

waveOutWrite

mpr

WNetOpenEnumA

wininet

InternetReadFile

avicap32

capCreateCaptureWindowA

ws2_32

WSAIoctl

version

VerQueryValueA

wsock32

WSACleanup

Sections

CODE
Size: 372KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

love
Size: 50B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE