64c5224f376078f72fdf6b167b7c6c6a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64c5224f376078f72fdf6b167b7c6c6a
Size

483KB
MD5

64c5224f376078f72fdf6b167b7c6c6a
SHA1

2e7a821a21517f89b03008c4cf1f2dd4c8022892
SHA256

8390b86a774bd8d084f067d71761c660e41ee75b695912a6313f58e437010ad5
SHA512

16b060363f8f4b14d3ffa870e4db71c8372f20e1e4fd9e735377f81c0af720eb059c3ec3cfe9ab0096c2c4b7dd5bbc5895c3f12c389249725f703531659db9bb
SSDEEP

12288:2xTk7dwUOP2ForLTllroLx71/UgXNLiz3UHh:yk7dwXeexlroL7aUHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64c5224f376078f72fdf6b167b7c6c6a

Files

64c5224f376078f72fdf6b167b7c6c6a
.exe windows:4 windows x86 arch:x86

51d74ae3626a212e596ccdb261a6006b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SafeArrayPtrOfIndex

wininet

InternetReadFile

avicap32

capCreateCaptureWindowA

msacm32

acmFormatChooseA

ws2_32

WSAIoctl

user32

CreateWindowExA

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

advapi32

StartServiceA

wsock32

WSACleanup

winmm

waveOutWrite

mpr

WNetOpenEnumA

Sections

Size: 433KB - Virtual size: 972KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE