11cb672240edbe0bc7c67ef1396b5391 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11cb672240edbe0bc7c67ef1396b5391
Size

3.1MB
MD5

11cb672240edbe0bc7c67ef1396b5391
SHA1

0299621fd9341b2403fc8b57b49eebd3914fe798
SHA256

758187bdb248c09fe5dfdfa5b512e33082f3daf1546b4043cf586676c031449e
SHA512

b87ed171fc92b8e2a5343b91536d5c502ad79b06139a6e2923fa2ff982514593b142a5b3083ea96f2a74a8dfe3aa8f1cb163bb889b769cc22ea52fcd66614bb6
SSDEEP

49152:uI+Ieypk4zxGH+v6LhcqxG4OYD46eET8JzbHuQheWNubN22TJnteBU:uI+IewrFoo610RYE/EMbHuEkZ22Tje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11cb672240edbe0bc7c67ef1396b5391

Files

11cb672240edbe0bc7c67ef1396b5391
.exe windows:5 windows x86 arch:x86

5f36638b9578653c742cde068e8363c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
SetUnhandledExceptionFilter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

MessageBoxA

gdi32

SetTextColor

advapi32

CloseServiceHandle

shell32

ShellExecuteA

ole32

CoUninitialize

oleaut32

SysAllocString

shlwapi

PathFileExistsA

winmm

timeEndPeriod

wsock32

WSACleanup

atl

ord47

comctl32

InitCommonControlsEx

wininet

InternetOpenUrlA

Sections

.text
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wwueew0
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wwueew1
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ