1a11e6d99614eeea624902ac19581699 | Triage

Sharing

General

Target

1a11e6d99614eeea624902ac19581699
Size

201KB
MD5

1a11e6d99614eeea624902ac19581699
SHA1

1957638f2d701b690e260713f2f38963c2f72d69
SHA256

ca8b364c0c5e6fc80832f8ea721c4355ec9389857369b7d30b21b9337093f7b3
SHA512

be4b464ccfa758efabc22ebf2272b172ce9eb91d7e720bb006b0644c775b2c83a356c16bc897129309b73d5c9686ae23535e6ad80f167ad169ef0d4ef45f59b9
SSDEEP

3072:6qvjuuU2M8nJV4pp3F7x6rBXlTFaZFW4L6/6PLn5AWD:5thMCV8p17xcTa6M6UVl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a11e6d99614eeea624902ac19581699

Files

1a11e6d99614eeea624902ac19581699
.exe windows:5 windows x86 arch:x86

9af7fa4839d0b8d831735c1c65dccf50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
DialogBoxParamW
CreateIcon
DialogBoxParamA
GetDlgItem
InsertMenuA

advapi32

RegQueryInfoKeyW
RegDeleteValueW
RegEnumValueW
RegFlushKey
RegGetKeySecurity

kernel32

ExitProcess

Sections

.lkjf
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kehp
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lilgh
Size: 140KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ikao
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ