111b6dde379d08374f1984ed5be69eda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

111b6dde379d08374f1984ed5be69eda
Size

58KB
MD5

111b6dde379d08374f1984ed5be69eda
SHA1

16f7bf70fbb13fdef10976391f5e8e059a6841c8
SHA256

3ffcc01bdb2b54fe719de098bde6e2c23b6b9a79cabda8abcec2470d09f72f44
SHA512

f13775f72a4f72b65849e5aa9779451654e9140639cf489282f1c5c0453d690fee6d84184328ddc8076def5ca9ad1abcd78c832e23b4b20b6fa59b836fad328e
SSDEEP

1536:hc+vu2gz46zgjeZJu6QJu6LfLeRYN5CLhqfrlrlg8d:hB9KAC4LLek88frlryc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
111b6dde379d08374f1984ed5be69eda

Files

111b6dde379d08374f1984ed5be69eda
.exe windows:1 windows x86 arch:x86

0d0c13680e7925fe1692d5d6f835568b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
exit
ferror
fgetc
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strtol
ungetc
wcslen
wctomb

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 664B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 900B - Virtual size: 900B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE