11a6c4ee2ef7885efe8c540c562f00b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11a6c4ee2ef7885efe8c540c562f00b1
Size

30KB
MD5

11a6c4ee2ef7885efe8c540c562f00b1
SHA1

e697c08d18183aef602724f68f4a1ca84641b6ac
SHA256

29c190b160c27a557333af7d2fb18b93b3c3301149ba3bd7065bc12c5bec8f18
SHA512

80b1b31ee2c0bdc11e66c5701e8188c850be22c01314bc3aeb70fd723a20334dd997fa5b7e53e6f02f21e7c8424bed83c7afdb5d096e1aa4aba237edd5c642cf
SSDEEP

768:AzCzDHjqcg3fwgpYK/k59zck/fDBmaXjW+Dd6s6m:fM3fiXjWqs2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11a6c4ee2ef7885efe8c540c562f00b1

Files

11a6c4ee2ef7885efe8c540c562f00b1
.exe windows:5 windows x86 arch:x86

2e78d2633923e668c6d4cf1636ec5a26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
DispatchMessageA
GetMessageA
CreateWindowExA
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
SetWindowPos
PostQuitMessage
PostMessageA

kernel32

GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
CreateFileMappingA
FindNextFileA
DeleteFileA
CloseHandle
GetLastError

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ