11af00c55608aae199bc5a72462b5129 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11af00c55608aae199bc5a72462b5129
Size

298KB
MD5

11af00c55608aae199bc5a72462b5129
SHA1

987675f887f8753ee3ee49a9654c847d3c82d7a4
SHA256

649c3e391f8ee6c1ccd21ec8e1651f16e205aba50d041d6cf6ae0b1c0ce1a47c
SHA512

cfa0b7da2d9b5a9a48f319971bc3b2000710a3d51d233569caf9c1f14f9340303cb7194829c6f2c9cff81d0d98845f6e2ae8ce466a739562ff0bad3a271900c4
SSDEEP

3072:Sdpe7kPXgomWqLEnCYvcvIXRTy1hmUI0xlOcwBIvS3oGcFuG9hFoHk148GzMwCpH:MnXNvDx8hzNxl8BIvSiFxTO8GzMN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11af00c55608aae199bc5a72462b5129

Files

11af00c55608aae199bc5a72462b5129
.exe windows:4 windows x86 arch:x86

1c401b959f744f1e1cb48e5faacfced2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
GetModuleHandleW
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ