11832aaaea01ab2ab4f4bbef2792335a | Triage

Sharing

General

Target

11832aaaea01ab2ab4f4bbef2792335a
Size

4.5MB
MD5

11832aaaea01ab2ab4f4bbef2792335a
SHA1

b086b6796613307e4fc109f224eb9f3550e0d3b4
SHA256

e44253c39391bb28f346dd98d874e4587a34ecec25cc920ddcf60751cd1bfdc4
SHA512

76c967665ccf20bcdeda6ffab8e0f29929605c3b9e80bb24f9c25f38f3c1674932e65afba486499aac2bce8cb871bfa8a6cd56ee9e78887ac8cd113a39d50286
SSDEEP

98304:5MGf2jqPwejTT9k7lw3lgIJm1PBMckd00ZTz+LX2yC0DX:Ff2jqBTG7lw36r1PSna0ZiXD7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11832aaaea01ab2ab4f4bbef2792335a

Files

11832aaaea01ab2ab4f4bbef2792335a
.exe windows:5 windows x86 arch:x86

8f929c866a26658938d56656ebfbde35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PrepareTape
GlobalDeleteAtom
UnregisterWaitEx
GetVolumeNameForVolumeMountPointA
LZSeek
DebugBreak
GetFileAttributesA
GlobalFlags
lstrlenA
OpenEventA
GlobalDeleteAtom
GetFullPathNameA
WriteConsoleA
LockFileEx
GetModuleHandleA
GetFileType
OpenJobObjectA
GetConsoleKeyboardLayoutNameA
SystemTimeToFileTime
Module32Next
SetConsoleNumberOfCommandsA
GetStringTypeExA
GetModuleFileNameA
SetFileTime
SetTapePosition
GetWindowsDirectoryA
GlobalDeleteAtom
GetThreadTimes
TermsrvAppInstallMode
WriteProcessMemory
WaitForMultipleObjectsEx
DuplicateHandle
WaitForSingleObject
VirtualAllocEx
GetDiskFreeSpaceA

Exports

Exports

Emalurh
InitTceodsmxy
Ynyipxy
Bvdmgpu
Jxvmghh
InitXygxclcun
Pmuipkfc
WriteJixqfan
Epxidxgx
WriteMsxsvxvoob
SetFvtssuf
Cgnpwpw
ReadLinanhrmui
Sjymgankb
Pknommjbjx
OpenPxkkkeilsy
AddNdmevggji
Ourqiple
WriteJbalwgrb
CreateQfhmwitxcj

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ