11f96b03e36a390e0313672691eb9b5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f96b03e36a390e0313672691eb9b5e
Size

1.4MB
MD5

11f96b03e36a390e0313672691eb9b5e
SHA1

08d41f499928cb55fffa78b2230c88e76d59513b
SHA256

3985c24d91bcf9d48f5a5a39f7917ab63302551fad8aa4237d9e69e053b93514
SHA512

62814bb5d8f00670cd0aa128eab2fecd3ff9a20de312ad68ce3f60c33d825fb15c0defad36947646b067249dea86806800984fee686521fcac2b2180750663f9
SSDEEP

3072:XVE4ESPd/ykBX+gT8xposndp8WD0+aGUeVA/HfHQbu1:i47dHOgT0pJdp8WD0+aGt63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f96b03e36a390e0313672691eb9b5e

Files

11f96b03e36a390e0313672691eb9b5e
.dll windows:4 windows x86 arch:x86

d021cf1af92a2367b6cd8c629891c8f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
SetThreadPriority
SetThreadAffinityMask
CloseHandle
SetThreadExecutionState
lstrcpynW
Process32FirstW
RaiseException
SetConsoleCtrlHandler
Sleep
SetErrorMode
SetupComm

user32

ValidateRgn
GetWindowRgn

advapi32

SetSecurityDescriptorControl

gdi32

SetPixelV
SetROP2
SelectPalette
GetCurrentObject
RectVisible

msvcrt

__p___mb_cur_max
_wcslwr
_osver
_ismbcsymbol

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ