261bb636d6195f5582ab63a70e8e7c95 | Triage

Sharing

General

Target

261bb636d6195f5582ab63a70e8e7c95
Size

247KB
MD5

261bb636d6195f5582ab63a70e8e7c95
SHA1

7e24100595806dfb80f01a238fa1cf2bc5bcad26
SHA256

992c30fb6592698c55cab1b5f79b935851ffff44fba14fced78509c40adfe590
SHA512

d40690046dbdd68e50fdce94799564b118c3795d322afb1ccf03ee3ebc4ca91ff5959e0c29251f21fed261dd6204aa7be7cb5c51998b46debdc7785cb7b28ad8
SSDEEP

6144:LLf7LEIC/+gEYMKd1UGg80wcFPnvt7eaxj7WqK:L77BCGgBd+zPrhvMo7Wq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
261bb636d6195f5582ab63a70e8e7c95

Files

261bb636d6195f5582ab63a70e8e7c95
.exe windows:4 windows x86 arch:x86

364e9b2e18d3d573393a4bf75c4f9dbd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
SetLastError
FreeLibrary
GetCompressedFileSizeW
TerminateThread
GetACP
GetLocaleInfoA
GetThreadLocale
GetStartupInfoA
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetDriveTypeA
CreateEventA
QueryDosDeviceA
OutputDebugStringA
SearchPathA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
CreateFileA
ReleaseMutex
GetCurrentThreadId
CreateThread
FlushInstructionCache
WaitForSingleObject
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
VirtualAlloc
VirtualFree

avifil32

AVIBuildFilter

advapi32

RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey
RegCreateKeyExW

oleaut32

GetRecordInfoFromTypeInfo
CreateErrorInfo
OleCreateFontIndirect
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

Sections

.text
Size: 150KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE