5c3001d8db6491e11b4673a893f61608 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c3001d8db6491e11b4673a893f61608
Size

386KB
MD5

5c3001d8db6491e11b4673a893f61608
SHA1

012d3a903c70af0473df00b24d77aaa3b7de39d8
SHA256

9b5f0667bfe03b5f11dc940cabe342c20981d705f46d855fbf55589f7d81c63e
SHA512

d74a656c9d111d0c71453d3ca49c4525fb758d745a803e70dbf9866491fa5b961b731c8118158bc4c2c5538c8743daeffa0c22f4726b6046f46c360afe54612c
SSDEEP

12288:oiqBYCvrayFzV/I+PN3C9hx7bcLeEgRmow:oiAYKrpFOs3CtblnQ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c3001d8db6491e11b4673a893f61608

Files

5c3001d8db6491e11b4673a893f61608
.exe windows:4 windows x86 arch:x86

05ee39d0bd535e2b3ca74e5d128ea0ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CreateWindowExA

ws2_32

WSAIoctl

oleaut32

SysFreeString

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

winmm

waveOutWrite

comctl32

ImageList_SetIconSize

gdi32

UnrealizeObject

wininet

InternetReadFile

msacm32

acmFormatChooseA

avicap32

capCreateCaptureWindowA

version

VerQueryValueA

mpr

WNetOpenEnumA

wsock32

WSACleanup

Sections

CODE
Size: 373KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

love
Size: 50B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE