65ee49a26a02178281e94e7cd50b5282976d305dc5b1b429ebaf6f13c0dfe3a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65ee49a26a02178281e94e7cd50b5282976d305dc5b1b429ebaf6f13c0dfe3a8
Size

37KB
MD5

1eaf7758cf323ecf26a2b70e68a9e143
SHA1

9ee8de7a174af60ecd528000f697e749421e758b
SHA256

65ee49a26a02178281e94e7cd50b5282976d305dc5b1b429ebaf6f13c0dfe3a8
SHA512

f8d3e5bd8f00ad403ac193ab1c8384faf132e7ae1d7c2a08fe1d8d39d2d0f4a6db33bf160e4dad56f86be6dc3264a5e62f1324334fbd5310ae27d98cfbb5e8a6
SSDEEP

768:8hw1Y4kFbGDQa6db+yHD17d5N07ePGHYWf0u0jlU/GzU:8dFaDSdb+AD1Rdw4u0jG/gU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65ee49a26a02178281e94e7cd50b5282976d305dc5b1b429ebaf6f13c0dfe3a8

Files

65ee49a26a02178281e94e7cd50b5282976d305dc5b1b429ebaf6f13c0dfe3a8
.dll windows:4 windows x86 arch:x86

d15c96e985cc117cd92a49ea87ffa53b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

timeGetTime

mfc42

ord818

msvcrt

??1type_info@@UAE@XZ

user32

GetCapture

gdi32

GetTextMetricsA

comctl32

_TrackMouseEvent

ole32

CreateStreamOnHGlobal

olepro32

ord251

oleaut32

SysFreeString

gdiplus

GdipGetImageHeight

msvcp60

?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ

Exports

Exports

CreateVideoWindow
ReleaseVideoWindow

Sections

.text
Size: 29KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE