3c054a6a4b327eab21866574511596bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c054a6a4b327eab21866574511596bb
Size

446KB
MD5

3c054a6a4b327eab21866574511596bb
SHA1

ff6b6afe288803cb05b87b38b0c4148af0e6e9bb
SHA256

8655c55079e2785e085bbe3ab20c9a608ee76f8b9d6bf2067271fe9b35193801
SHA512

5469a496a3e58ffcfce3f2a92187afc8656fcbf1f873410a41cc06bb133c29c8e3d639d185da7a1f4f5d12d9d8974879b32642020e59df31e08779bd41fd0603
SSDEEP

12288:2xTk7dwUOP2ForLTllroLx71/UgXNLiz3UHhP:yk7dwXeexlroL7aUHhP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c054a6a4b327eab21866574511596bb

Files

3c054a6a4b327eab21866574511596bb
.exe windows:4 windows x86 arch:x86

51d74ae3626a212e596ccdb261a6006b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SafeArrayPtrOfIndex

wininet

InternetReadFile

avicap32

capCreateCaptureWindowA

msacm32

acmFormatChooseA

ws2_32

WSAIoctl

user32

CreateWindowExA

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

advapi32

StartServiceA

wsock32

WSACleanup

winmm

waveOutWrite

mpr

WNetOpenEnumA

Sections

Size: 433KB - Virtual size: 972KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE