0311fd477a84a5542b7964ef85334821 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0311fd477a84a5542b7964ef85334821
Size

815KB
MD5

0311fd477a84a5542b7964ef85334821
SHA1

892bf0e4f47daa7de398926dc8ebe72dde442095
SHA256

51f09295d9cc82c704fd957de93272365bdc41b4494d8b9c541556f6306d3ad7
SHA512

6d8624345e76fbb88c3eae4cad14c1edbdabb688bdd4d327d1865f4aab8507793255f5edb98ebe6bbf1e04785239780bc81497a6c0c0049094fd0f745c18c1da
SSDEEP

24576:5d9u/cVBFPfBjdBcjc1BJNrPJR3RSLjUOx:H9ukBFHTOwJDRhSL1x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0311fd477a84a5542b7964ef85334821

Files

0311fd477a84a5542b7964ef85334821
.exe windows:4 windows x86 arch:x86

070f3bc31f765329562eb505ec75b886

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
IsDebuggerPresent
HeapCreate
GetStdHandle
GetACP
FreeEnvironmentStringsA
LoadLibraryExA
LocalFree
GetFullPathNameA
CreateEventA
TlsGetValue
IsBadReadPtr
CreateFileA
GetModuleHandleA
LocalUnlock
GetLastError
CreateFileMappingA
GetConsoleCP
GlobalLock
CloseHandle

user32

GetDlgItem
PostMessageA
GetIconInfo
EmptyClipboard
IsWindow
SetFocus
GetDC
EndDialog
ScrollWindow
DispatchMessageA
CreateDialogParamA
DefWindowProcA
GetMessageA
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecBool
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ