11f4d5c56997b40437e6e21b7961f958 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f4d5c56997b40437e6e21b7961f958
Size

160KB
MD5

11f4d5c56997b40437e6e21b7961f958
SHA1

3a73861ba68842367c962e7aca26e161e876d55f
SHA256

e795ea20b5393703400dcbb9786d84eb03fc702b4b2db87d6d77d52d23ad177a
SHA512

87ebc97f5e4debbb63e7c34bc141923351bc5f6bdc025ba42da3c8f6dce800c3bc7297d86d430533781b138eae2855c1318542202211611ed978c2df4b7c7fb0
SSDEEP

3072:GNIV1KFceR3vLz9544evnL+Shcft8atu5Sx0cgHbFnk:9SFce9V5ILwCaE5Sxrg7Fnk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f4d5c56997b40437e6e21b7961f958

Files

11f4d5c56997b40437e6e21b7961f958
.exe windows:4 windows x86 arch:x86

f95c3d489bb12bcbac4bf2fe9e9a9ceb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

Sections

CODE
Size: 150KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE