4dfae09d2913808c642a5b9bf06beb9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dfae09d2913808c642a5b9bf06beb9b
Size

407KB
MD5

4dfae09d2913808c642a5b9bf06beb9b
SHA1

609571f4cfd498d982ca835ad14099fb4eeaaf26
SHA256

0368a057a8a16503266e4fc74bfbc17da641611a3ffb987385eb099005dd87ef
SHA512

7a0b623fe37a535416414dc1a10b528cc4b938aa9fad3e153a79e5121d7de260d2847cff7b4390f7b49ef02386173e89162a7079a01dba80f13914f95baf60f5
SSDEEP

6144:5mXNvryMK/azeuiJkkDVRj92MYJff+TVrETSGclKDn8HQRel7K9NDu3VuX8Q1f:5mdvryM8OOdVx7YJf2T9fKQHofuFxwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dfae09d2913808c642a5b9bf06beb9b

Files

4dfae09d2913808c642a5b9bf06beb9b
.exe windows:4 windows x86 arch:x86

b19ddd20811ef0068bf208a135062a0b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExA

mpr

WNetOpenEnumA

user32

CreateWindowExA

comctl32

ImageList_SetIconSize

version

VerQueryValueA

wsock32

WSACleanup

avicap32

capCreateCaptureWindowA

oleaut32

SafeArrayPtrOfIndex

wininet

InternetReadFile

ws2_32

WSAIoctl

winmm

waveOutWrite

shell32

Shell_NotifyIconA

gdi32

UnrealizeObject

msacm32

acmFormatChooseA

Sections

CODE
Size: 394KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

love
Size: 34B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE