bff3c916d63073dcbfc64b032cff882e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bff3c916d63073dcbfc64b032cff882e
Size

383KB
MD5

bff3c916d63073dcbfc64b032cff882e
SHA1

0d26a88aec1b63d9187567457676b924e17e92ec
SHA256

6bfde0b82dcf3566b1ce75c3a552d38dad3efee58d8eb3bdb7159a798882124f
SHA512

3cf62844f1765ab30992ffe661d668eb6a4ec8665c2ed4a42fe59f0ea83beae2c3febacc66296e6d8c777d2ebcc761057f004990131e45cf4bbb8bfce62eb0e2
SSDEEP

6144:g9Ql/WbS+6XC9nLcs5Y3a4K0ffKnBY+oq8EO5zOe7vjNrTMlAfeKoDDFHaleGqIO:IGObmC9nX5uaunKnBY+oq8/XkAf0DDFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bff3c916d63073dcbfc64b032cff882e

Files

bff3c916d63073dcbfc64b032cff882e
.exe windows:4 windows x86 arch:x86

dbe319107df3c291e77717640c518fc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

StartServiceA

wsock32

WSACleanup

comctl32

ImageList_SetIconSize

avicap32

capCreateCaptureWindowA

ws2_32

WSAIoctl

mpr

WNetOpenEnumA

oleaut32

SysFreeString

gdi32

UnrealizeObject

version

VerQueryValueA

msacm32

acmFormatChooseA

user32

CreateWindowExA

shell32

Shell_NotifyIconA

winmm

waveOutWrite

wininet

InternetReadFile

Sections

CODE
Size: 371KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

love
Size: 50B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE