11a9b99b9d7f518de18f5efda9a65c19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11a9b99b9d7f518de18f5efda9a65c19
Size

201KB
MD5

11a9b99b9d7f518de18f5efda9a65c19
SHA1

8a3e442a1a3d9aaad8d41a2869b21e1a9a8d3a7d
SHA256

23f61165d61ad3664613dad2172cc9873b3fd9012c0c73570ddff795f07bcdf5
SHA512

990e3deec7da1033a6ed34828eb6a0a162912fd8b365c351253eced9808b2865069fa7e63593b95ca9465fd46f4f61df67345fef66e4e83bf0ab33a9a49d9436
SSDEEP

3072:BOnbqrXqPH3pvJkmw0G6dVwzKYd4pvysappOjwCXqszd6vPmanOsp:BhTS3pO0Gi0d4pazTOs+rwPma

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11a9b99b9d7f518de18f5efda9a65c19

Files

11a9b99b9d7f518de18f5efda9a65c19
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

FormatModule@16
GetMonitorExW@12
IsValidSizeA@8
CallSectionNew@4
InstallTextOriginal@4
GetHeader@4
DecrementSemaphoreEx@8
IsValidAppNameOriginal@4
InstallDateTimeExA@4
RemoveSectionW@4
SendMediaTypeExA@16
GlobalMutantW@16
ModifyDeviceExA@4
CrtOptionW@4
ShowConfigW@16

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nabis
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.refee
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tide
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.psikif
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hodta
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ