71762f7124e0e5a52ebb5d74ec6fcf9d2ba908aca83179bd58c111122515dd99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71762f7124e0e5a52ebb5d74ec6fcf9d2ba908aca83179bd58c111122515dd99
Size

2.7MB
MD5

728d8dd85f4fac5d1b53ceba748faad4
SHA1

cd4cf8936e9d6c1b9cdec8dc8358609e994a973f
SHA256

71762f7124e0e5a52ebb5d74ec6fcf9d2ba908aca83179bd58c111122515dd99
SHA512

6c667acdff2c47fe37ca72c069025688c4dc728de1afdfff59653bbeff05d41054299c4c7c053ff9b02f45d5146547026cf4299cf58102a42786c6d9a0b7ed20
SSDEEP

49152:4G53hv3DOVNE0SikqAnuGEHW4S9+/mLBjXvLoQDBh3J36Pb5pbVF5dDTTP+wmnOM:fhv3DiO0mPH1s/mLJEWdNSVNdHTP+9nz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71762f7124e0e5a52ebb5d74ec6fcf9d2ba908aca83179bd58c111122515dd99

Files

71762f7124e0e5a52ebb5d74ec6fcf9d2ba908aca83179bd58c111122515dd99
.exe windows:4 windows x86 arch:x86

7ad57926632c37de21562ed616883807

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

wininet

HttpAddRequestHeadersA

msvfw32

DrawDibClose

avifil32

AVIFileCreateStreamA

advapi32

RegCloseKey

version

GetFileVersionInfoA

wsock32

WSACleanup

winspool.drv

ClosePrinter

comctl32

ImageList_Add

comdlg32

ChooseColorA

gdi32

AbortDoc

shell32

ExtractIconExA

user32

ActivateKeyboardLayout

winmm

PlaySoundA

imm32

ImmGetContext

ole32

CLSIDFromProgID

oleaut32

GetActiveObject

oledlg

ord3

Sections

.text
Size: 2.7MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE