0407b547b5912ef15fcccea53ecd60ea7406308d6ca8513333047ed21714ceaa

General

Target

0407b547b5912ef15fcccea53ecd60ea7406308d6ca8513333047ed21714ceaa
Size

312KB
MD5

a4420bd13751b455bbe4c31b2cb5bcdd
SHA1

15bcdbe3a367484aae2de4799e3e22e70d343dc3
SHA256

0407b547b5912ef15fcccea53ecd60ea7406308d6ca8513333047ed21714ceaa
SHA512

f8c564c519f8fca9eb121d3977b0c9f6f7c216038a172f8b2bae666c116ac62687c9cc1f2fa367faf35b0b76cb59bd0af743fc60018a4b3009d770a8413d018f
SSDEEP

6144:CzvooPsfEl5w3w1UI8AyNc5f8OXdHWv2L+UV+Klt0oOCXd3Dirq:CzvooEUw3w1RFyNcuY2v2L+O+U0oOSdt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0407b547b5912ef15fcccea53ecd60ea7406308d6ca8513333047ed21714ceaa

Files

0407b547b5912ef15fcccea53ecd60ea7406308d6ca8513333047ed21714ceaa
.exe windows:4 windows x86 arch:x86

7e618fdb204119b02b810d42df866f04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

avifil32

AVIFileGetStream
AVIFileRelease
AVIFileInit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIStreamGetFrameOpen
AVIStreamGetFrameClose
AVISaveOptions
AVIFileOpenA
AVIStreamRelease
AVIStreamInfoA
AVIStreamGetFrame
AVIMakeCompressedStream
AVIStreamWrite

user32

GetKeyState
EnumWindowStationsW
CreateWindowExA
DispatchMessageA
GetMessageA
SetCursor
ShowWindow
TranslateMessage
ReleaseCapture
GetClassLongA
SetCapture
GetClassLongW
SetFocus
PeekMessageA
DefWindowProcA
CallWindowProcA
SetWindowTextA
BeginPaint
EndPaint
RegisterClassA

gdi32

SelectObject
SetStretchBltMode
CreateCompatibleDC
DeleteDC
StretchBlt
GetObjectA
SetDIBitsToDevice
FillRgn
GetStockObject
CombineRgn
CreateRectRgn
CreateDIBSection
StretchDIBits
GetCurrentObject
DeleteObject
BitBlt
SetDIBColorTable

kernel32

GetNumberOfConsoleInputEvents
CreateFileMappingA
UnmapViewOfFile
GetFileType
GlobalSize
CreateFileA
ExitProcess
GetFileSize
CloseHandle
MapViewOfFile
Sleep
ReadFile
WriteFile
lstrlenA

Sections

.text
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e618fdb204119b02b810d42df866f04

Headers

File Characteristics

Imports

avifil32

user32

gdi32

kernel32

Sections

.text Size: 187KB - Virtual size: 186KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 117KB - Virtual size: 116KB

.edata Size: 5KB - Virtual size: 80KB

.text
Size: 187KB - Virtual size: 186KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 117KB - Virtual size: 116KB

.edata
Size: 5KB - Virtual size: 80KB