5511a7ad0927dff617504f0824981b82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5511a7ad0927dff617504f0824981b82
Size

41KB
MD5

5511a7ad0927dff617504f0824981b82
SHA1

f1d192ef2e92d21cc26cc81d61b71263eb1201e8
SHA256

da792ff4697e6f075001334289157defbfbc258aba7400c60799ef9c667b4e38
SHA512

d7721ec3ace4fa4c9e5a0af9435c717de08751181347a1d7390a398e50a5ee1b132aaa77a2a9f913dca25c633eddcb1b640dce0b1f83e630904df33962c64c78
SSDEEP

768:GyhyDFwh1D34Ts26dvB10Jd/zIwCeC+VuUCCVU1TVCUrCCCVQ:GyoA1D34Ts26dvB1NJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5511a7ad0927dff617504f0824981b82

Files

5511a7ad0927dff617504f0824981b82
.exe windows:4 windows x86 arch:x86

8ab7f13850e9fd3663124283ea829723

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
TranslateMessage
RegisterClassExA
LoadCursorA
LoadIconA
LoadStringA
LoadAcceleratorsA
CreateWindowExA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DialogBoxParamA
DestroyWindow
PostMessageA
SendMessageA
SetWindowTextA
EndDialog
TranslateAcceleratorA
DispatchMessageA

kernel32

Sleep
GetLastError
lstrcpynA
GetModuleHandleA
LoadLibraryA
FindClose
FindFirstFileW
CreateDirectoryW
GetStartupInfoA
FindNextFileW
GlobalAlloc
WaitForSingleObject
CreateThread
TerminateThread
CreateMutexW
GlobalSize
ReleaseMutex

comctl32

ord17

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p__acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ