3129c2aa3f33beb84e28747e37d27cb3cfac8cf0a77c6fabd0a803f5550648d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3129c2aa3f33beb84e28747e37d27cb3cfac8cf0a77c6fabd0a803f5550648d5
Size

14.6MB
MD5

27cd5de5071f4883fddee05f9f2df3ea
SHA1

b15cdcb802adfae3667ed7aede6e3b7444228c20
SHA256

3129c2aa3f33beb84e28747e37d27cb3cfac8cf0a77c6fabd0a803f5550648d5
SHA512

d82997c99ea842048d12e1a638f04dac43771b2ce9413c32634b97c5d2347bb1825d0f9c7b0a0d8921edbee031d507c5936a75c5a684acc6573ef9f43b365702
SSDEEP

393216:lKi5NW3oFyY6poqx34fhRcMe2tliqamkLJ2qHOT:lp5N2oFyfRx34sARa99u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3129c2aa3f33beb84e28747e37d27cb3cfac8cf0a77c6fabd0a803f5550648d5

Files

3129c2aa3f33beb84e28747e37d27cb3cfac8cf0a77c6fabd0a803f5550648d5
.exe windows:5 windows x86 arch:x86

ac5253654702104558578f0bba0f975b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

user32

GetSysColorBrush

gdi32

SaveDC

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

ChooseColorA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

SysAllocStringLen

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 3.8MB - Virtual size: 25.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE