51845b843458b40e19ffdeba74a4ce1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51845b843458b40e19ffdeba74a4ce1f
Size

281KB
MD5

51845b843458b40e19ffdeba74a4ce1f
SHA1

664e2522c3ae3d6f9e09548d24d2c7e45cc09430
SHA256

d7c1ecc26ecae81703d65cd1ff0bfbe965aa3bdd050a4d42cab5697fcf196014
SHA512

d1f1343b661e4141d1e49f800b61acde5b1e2ad35ef46f90f5210c03aeee71b0254af8c7459d53fe9013588db2411b72a359d539f1ca7f7a4a9e1c28dd55aa7f
SSDEEP

6144:7iQsTv5z2JBmprxtGLfKSBD1RpEjdy2JaJ9+Ba9DgsHX:WprxszKQD1RofOp3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51845b843458b40e19ffdeba74a4ce1f

Files

51845b843458b40e19ffdeba74a4ce1f
.exe windows:4 windows x86 arch:x86

0249a7595af23e8af94d791ffae62632

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

winmm

waveInUnprepareHeader

avicap32

capCreateCaptureWindowA

msvfw32

DrawDibDraw

wsock32

WSACleanup

urlmon

URLDownloadToFileA

Sections

.text
Size: 271KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 17B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE