0411a4b2dc8b4959f700ae9ef390c101 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0411a4b2dc8b4959f700ae9ef390c101
Size

53KB
MD5

0411a4b2dc8b4959f700ae9ef390c101
SHA1

00362323c293141b54b8542f39146454433c2ea2
SHA256

276cacb3f2ecb9aef58926f47d2bbb490092748cef8dedaa1820c2b83d643918
SHA512

8a18507b28becf81ed5bafe2731517fffc7be8306a9f2f89797babf0628cb6603944103dcc15d45b63d63b926a2995d55956a9604afc24ef18876ae3218a99d7
SSDEEP

1536:53yS9BlX7DhKlEOXVTVZ6sWai+o5hxwXubZN/j:ByS/FAWiVLs5zJZRj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0411a4b2dc8b4959f700ae9ef390c101

Files

0411a4b2dc8b4959f700ae9ef390c101
.exe windows:1 windows x86 arch:x86

8572d1fe78dc368a462183e384794431

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressW
SetEnvironmentVariableA
GetNamedPipeHandleStateW
CreateMutexA
GetTimeFormatW
WritePrivateProfileStringA

user32

LoadImageA
LoadStringA
IMPQueryIMEA
UnregisterClassA
RealGetWindowClassW
IMPGetIMEA
GetTabbedTextExtentA

gdi32

EnumFontFamiliesA
TextOutA
ResetDCA
DeviceCapabilitiesExA

Sections

.data?
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wer
Size: 1024B - Virtual size: 599B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ