11f5d56f7a9f104a8255365a21de5ab5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f5d56f7a9f104a8255365a21de5ab5
Size

45KB
MD5

11f5d56f7a9f104a8255365a21de5ab5
SHA1

e611cc29b1e4f705616130cdb9acf3b07e391c2b
SHA256

00b53f24acc3361a44085f794856f04951b115045cbeaa17183ad6dcb1b58481
SHA512

854e0bd8e63c93e35131158b63b63d05bcbbe55500b3b52d8da5c5722d9212e34bf0ab342f57e8070f9406c980b251d088a9fccc7a066b48597e63cd01a18a65
SSDEEP

768:nntJgsoPCuRircI20zOLVAV3gGglw3g267PtJAadac8pGItwK4KRhExs0E:nbgsoX3Itz6GmGEw3g26hCE8pGIfRhik

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f5d56f7a9f104a8255365a21de5ab5

Files

11f5d56f7a9f104a8255365a21de5ab5
.exe windows:5 windows x86 arch:x86

6e47e1b6daf6b136aa89afd2e63f5ddf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow

kernel32

GetCurrentDirectoryW

shlwapi

PathIsContentTypeW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

net3e
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net1e
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net5e
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net4e
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net2e
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ