518fd9443745d15840460423bf0689fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

518fd9443745d15840460423bf0689fb
Size

384KB
MD5

518fd9443745d15840460423bf0689fb
SHA1

bf8233e3fe549a1f1f082d958ddb171569b44d8f
SHA256

411a9b682f3f23ca22001d1f7a971ec4e560393807059e0fe8c556a7c9a6016a
SHA512

989ddf52864d29b7ff9f2d9a3fc0991038178c05f48baac06ee28be07de6fb63f91961a67a0d231f069322201c345b28c84ee3ae655ae4acf783bc6482273cc6
SSDEEP

12288:h42INOoLd010LJUTU7bTQkBPigvnFIaV7nlaE+Mc:MNOJ0lUTUUavvFIInh+Mc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
518fd9443745d15840460423bf0689fb

Files

518fd9443745d15840460423bf0689fb
.exe windows:4 windows x86 arch:x86

ba15ed17b8c31af959061c2b3533e98b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

waveOutWrite

ws2_32

WSAIoctl

user32

CreateWindowExA

oleaut32

SysFreeString

advapi32

SetSecurityInfo

wininet

InternetReadFile

msacm32

acmFormatChooseA

shell32

Shell_NotifyIconA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

avicap32

capCreateCaptureWindowA

mpr

WNetOpenEnumA

version

VerQueryValueA

wsock32

WSACleanup

Sections

CODE
Size: 372KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

love
Size: 50B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE