1112330e0d58a2a58d85a34dda17a12b | Triage

Sharing

General

Target

1112330e0d58a2a58d85a34dda17a12b
Size

308KB
MD5

1112330e0d58a2a58d85a34dda17a12b
SHA1

e2fbc8ed829568c3f2824e0935c4540e84dfd26e
SHA256

dc0723817b94cd6e72a91031663032fb8f6b9ad943360a64fa913839b27f3a96
SHA512

c86080db8ff2dd1fb30eaefae730e9ef20b61b3a5b6ce90220ddba627e5a22ffd386734efcf924df7b23577d49a4728873d5105ac3c3433d077980d472a8d94f
SSDEEP

3072:R7zQZ35PZe/sgjot67kJ1KZ/ocvR0EKBdhGtTBfdtLJ:RHQN5RcV7kLIBvR1KBHGtTBPLJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1112330e0d58a2a58d85a34dda17a12b

Files

1112330e0d58a2a58d85a34dda17a12b
.exe windows:4 windows x86 arch:x86

005ef6720fa3a02bcd432d7f00daca16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameA
DeleteFileW
SetFilePointer
Sleep
WriteFileEx
SetEndOfFile
OpenEventW
OpenThread
SetEvent
SetConsoleTitleW
WriteProfileSectionA
ResumeThread
OpenFileMappingA
SleepEx
ResetEvent
SystemTimeToFileTime
TlsAlloc
PulseEvent
SetFileTime
OpenEventA
OpenMutexA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

SetWindowLongA
GetWindowTextA
SetWindowTextA

msvcrt

exit
_controlfp
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
memset
memcpy
_ftol
_CxxThrowException
_purecall
malloc
free
_exit
_XcptFilter
toupper
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ