7f754a59c337feb3ba47d156e0387dd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f754a59c337feb3ba47d156e0387dd8
Size

36KB
MD5

7f754a59c337feb3ba47d156e0387dd8
SHA1

0f6456922e9c318ebd2a3bf06fdb03686a8cbd24
SHA256

c6199160b4515e859f7667f8412636505bb0d6f81829f9fa04360f80aee54671
SHA512

ad3fdb4674afbe2aa950f9eb48dc03c4d399ca2685a28edac0d7b2088c9f0449fc364773db6a6431a0ac2c5929d4bf0644ea59697714c2a8b2eb283da7e99849
SSDEEP

768:5G1ttEGKkCfvy0Eecfq41K4JPZ+msk/AT+2YJxnEplbvaWM87rjHKMbmIw9:5GrtEfAneciB4JhckYsnEpmkHK/9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f754a59c337feb3ba47d156e0387dd8

Files

7f754a59c337feb3ba47d156e0387dd8
.dll windows:4 windows x86 arch:x86

0ea86fd166f938eae1203061bbf216a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

avicap32

capCreateCaptureWindowA

ws2_32

listen

shell32

ShellExecuteA

psapi

GetModuleFileNameExA

imm32

ImmReleaseContext

winmm

waveInUnprepareHeader

ole32

CreateStreamOnHGlobal

msvcrt.dll

strrchr

shlwapi

StrCmpW

user32

ExitWindowsEx

advapi32

RegQueryValueExA

gdi32

CreateCompatibleBitmap

Exports

Exports

cdwertgyhq
DoService
ServiceMain

Sections

.rdft
Size: 25KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dsewq
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gyumn
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE