704e903561a1b704ca1710e5413d85d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

704e903561a1b704ca1710e5413d85d2
Size

385KB
MD5

704e903561a1b704ca1710e5413d85d2
SHA1

b9e513bfcc851f36857f9cebf4ead1f9cefa4a94
SHA256

257cd1a25ff98e04c8c685c3495a77728a952058c5dd7bf39d2be8d332b6b954
SHA512

255abf26aa2fe46ea33d7886d7a4acdef272a673428ff12f0d3714070966b98f005e4ecfc03f5a5310715c61415ab792754d274a801a2e656c848df30fb4049e
SSDEEP

6144:XAGypFsMuTnr3zx7i/zHYB5jFc3FjCHWm659zFKiRd/i60ry64S68K:XALHslvN7iEHju42zzzFXRdq6foK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
704e903561a1b704ca1710e5413d85d2

Files

704e903561a1b704ca1710e5413d85d2
.exe windows:4 windows x86 arch:x86

a25f3d37958456d1ecbd26b9efa35f36

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

StartServiceA

oleaut32

SafeArrayPtrOfIndex

winmm

waveOutWrite

shell32

Shell_NotifyIconA

msacm32

acmFormatChooseA

version

VerQueryValueA

avicap32

capCreateCaptureWindowA

wsock32

WSACleanup

user32

GetKeyboardType

comctl32

ImageList_SetIconSize

wininet

InternetReadFile

mpr

WNetOpenEnumA

ws2_32

WSAIoctl

gdi32

UnrealizeObject

Sections

CODE
Size: 372KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

love
Size: 50B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE