889e95cba8aab2e99297538f40952dbf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

889e95cba8aab2e99297538f40952dbf
Size

235KB
MD5

889e95cba8aab2e99297538f40952dbf
SHA1

fd60ec3cf2b99ba8c049893ad97a68eeb5769009
SHA256

75a2e29dce1efdecac012fff22b054682b203c21fa78cedc3b8648d2b844fb37
SHA512

95ef770d22243e67b351667f4c9425ffb3e4ae910c709690bbef5c578b59604c8e560b9390ad800e68fd1d2d2f32af2b99635584578b2c17e1f2e1206dac5b4e
SSDEEP

6144:7HRYTjOZt8zrkH76LYNyHyMhVKRzbl875i+JMN45PHE:LS+28O0cHyMsp+zMos

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
889e95cba8aab2e99297538f40952dbf

Files

889e95cba8aab2e99297538f40952dbf
.exe windows:4 windows x86 arch:x86

816ad99b02642348d316c58fcdbf28f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

avifil32

AVIBuildFilter

kernel32

GetLongPathNameA
GetProcAddress
GetModuleHandleW
FindFirstChangeNotificationA
GetCurrentThreadId
GetTickCount
GetLastError
lstrlenW
lstrcatW
lstrcpynW
lstrcmpiW
FreeLibrary
LoadLibraryW

oleaut32

OleLoadPictureEx
GetRecordInfoFromTypeInfo
VarI2FromDec
SysFreeString

Sections

.text
Size: 112KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ