994692523be7afb314674393ba16aed5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

994692523be7afb314674393ba16aed5
Size

324KB
MD5

994692523be7afb314674393ba16aed5
SHA1

73ac669079d473b8168589f439c3ca6fb1bdb551
SHA256

f278b5857b185e6c0512ccb16e177a0e22877f74505f19d99b578032aaa8fa3b
SHA512

1f2e5a8d21e2f47f9e80a1dfa9cfd17ccf0ff91d673a95219b02b0a1b24facc4ce9afe0ef0b7f2a128e8a3e9ab0f8eca4f7b38f0f5b6c8f5064c5abc9815a698
SSDEEP

6144:QLS05EHeDntTtoC2Q16Hqqrzg5YZhDnF0SOd8u0WIeY+8lobkWStM2:QLSeDtTSYKfIiRnuShu0WHY+ZhoM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
994692523be7afb314674393ba16aed5

Files

994692523be7afb314674393ba16aed5
.exe windows:4 windows x86 arch:x86

c089e78923278ad0902eddaf26d58be5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetDC

gdi32

LineTo

winmm

PlaySoundA

winspool.drv

ClosePrinter

comdlg32

ChooseColorA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ord17

oledlg

ord8

ws2_32

getpeername

Sections

.MPRESS1
Size: 289KB - Virtual size: 864KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE