a11d7873aa5c4fd9a54801dad76472166e3aebf700e98b955bda988123c625fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a11d7873aa5c4fd9a54801dad76472166e3aebf700e98b955bda988123c625fb
Size

541KB
MD5

f8ffadbd16595a46b8dbebb4482a4050
SHA1

cfd847cdc7984ce6522a1557d3bcc3e2efdc6618
SHA256

a11d7873aa5c4fd9a54801dad76472166e3aebf700e98b955bda988123c625fb
SHA512

68a68d6de0ed91cf79effb8953a616533d60153ce464984c5092e2a52207951673c1b11fdbffef85a43604d8063504548d308c1ce6a09abbb90575bbf954a1de
SSDEEP

12288:pcxA77HAsd6GcCctr0VbpHikxabJ2JzHdr:aqfHAsd6JCctQVbd1AcJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a11d7873aa5c4fd9a54801dad76472166e3aebf700e98b955bda988123c625fb

Files

a11d7873aa5c4fd9a54801dad76472166e3aebf700e98b955bda988123c625fb
.exe windows:4 windows x86

8696da4845ea5e584d4188efec1900bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegCloseKey

comctl32

ImageList_Add

gdi32

BitBlt

user32

ActivateKeyboardLayout

ole32

CLSIDFromString

oleaut32

CreateErrorInfo

Sections

.text
Size: 382KB - Virtual size: 968KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 153KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE