4c8e921ae73226e7093abea2eaa82fe9f6d9263bcd7a5f21e3d1a26ac44a0f86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c8e921ae73226e7093abea2eaa82fe9f6d9263bcd7a5f21e3d1a26ac44a0f86
Size

42KB
MD5

99597c1a34fce9b549dbb433bdd86b55
SHA1

74b255bb3a039ef839f7cb6c927d0de6d7908f39
SHA256

4c8e921ae73226e7093abea2eaa82fe9f6d9263bcd7a5f21e3d1a26ac44a0f86
SHA512

b19837080a71d0eee68a1c259edbfce335d58cae7254a32d315101805084a6dc34d94da64dfc816cf8f3ce952183e3dddb5f7bf1b3e76c0b92ee9cde6e2bbd95
SSDEEP

768:NRMjsw75HadDIzFHG+np8ax5dLqz1SZ8Almvz06lcxSIP7n5s+LvNzU:DMwS5vxnpzxHqz42Alm7rD2e+LvJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c8e921ae73226e7093abea2eaa82fe9f6d9263bcd7a5f21e3d1a26ac44a0f86

Files

4c8e921ae73226e7093abea2eaa82fe9f6d9263bcd7a5f21e3d1a26ac44a0f86
.dll windows:4 windows x86 arch:x86

e25f84875e45cf7ba7f06b2a8b5acfec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

timeGetTime

mfc42

ord825

msvcrt

??1type_info@@UAE@XZ

user32

GetCapture

gdi32

GetTextMetricsA

comctl32

_TrackMouseEvent

ole32

CreateStreamOnHGlobal

olepro32

ord251

oleaut32

SysStringLen

gdiplus

GdipGetImageHeight

msvcp60

?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXID@Z

Exports

Exports

CreateVideoWindow
ReleaseVideoWindow

Sections

.text
Size: 34KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE