112530b08cc4e9b35782a967409b7057 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

112530b08cc4e9b35782a967409b7057
Size

392KB
MD5

112530b08cc4e9b35782a967409b7057
SHA1

9d37503fa611b0666e8c53d9541e20a44142b7ea
SHA256

682a8fdceb476484824ae7355fa8ce1425f7fc64b35d237110e313976d49a064
SHA512

844e0eb4eeb3d93727af977ed6f380b2c779ef08c7bee744290322e2b35470d6c6a3478c55c57f95e8c12e1dcc9f13f204cbad2911fb91716a8bbb5c16cc9754
SSDEEP

12288:ezh/yF1tpKV+n4o6/yf81C1/FVKrm0I3U6:eEzKavfX0Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
112530b08cc4e9b35782a967409b7057

Files

112530b08cc4e9b35782a967409b7057
.exe windows:4 windows x86 arch:x86

2dda4ac8b1053be12cb06555aacc5a0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
GetEnvironmentVariableA
GetACP
GlobalFree
CreateFileA
FindClose
GetModuleHandleA
FindResourceA
CreateProcessA
CloseHandle
CreateMutexA
GlobalUnlock
ReleaseMutex
HeapCreate
GetCommandLineA
ExitThread
DeleteAtom
LoadLibraryExW
PulseEvent
SetLastError

user32

DispatchMessageA
FillRect
GetIconInfo
GetDlgItem
DrawMenuBar
IsWindow
SetFocus
CheckRadioButton
DrawEdge
GetDC
DefWindowProcW
CopyRect
CallWindowProcA

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecBool
ASN1BEREncBool
ASN1BERDecCheck

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ