c81f5df2227a49ad382f412fd6bb5da9 | Triage

Sharing

General

Target

c81f5df2227a49ad382f412fd6bb5da9
Size

523KB
MD5

c81f5df2227a49ad382f412fd6bb5da9
SHA1

4ff722238358a87b4b7d440c7aa511766c1c4340
SHA256

117de53d26f6a1c5d5ef860332793e71a62573cbf48aea009bc07647ec7d236b
SHA512

220fe1a7d3dfde1cf843c24af4e8e30036b9342a37862ac6380ca26593ab0b5a52ba175c68ebb7d0d7d299313f8dacd16a03fff40f94f887e5b4c9d4644ec959
SSDEEP

12288:fqISZzFjT5tmKZfMw29AwHKzDOfVrqg14sk6VtVMu1S:fKzFjT5trEAVzDarqv6VMu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c81f5df2227a49ad382f412fd6bb5da9

Files

c81f5df2227a49ad382f412fd6bb5da9
.exe windows:4 windows x86 arch:x86

9bd1190c48cdf490d42ea632bf68951c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

vcl60.bpl

@Consts@initialization$qqrv

vclx60.bpl

@Filectrl@initialization$qqrv

rtl60.bpl

@System@initialization$qqrv

te_cb6.bpl

@Te_bitmap@Finalization$qqrv

pdvdb

ord1

pdvdi

ord3

avcodec

ord518

avformat

ord10

msvfw32

ICClose

advapi32

AdjustTokenPrivileges

version

GetFileVersionInfoA

wsock32

WSAAsyncSelect

comctl32

ImageList_Add

gdi32

Arc

shell32

SHBrowseForFolderA

user32

CallWindowProcA

winmm

timeBeginPeriod

ole32

CoCreateInstance

oleaut32

SysAllocString

wmvcore

WMCreateProfileManager

Sections

.text
Size: 466KB - Virtual size: 13.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE