10411baa94e9bb8876452eb6a18ec2bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10411baa94e9bb8876452eb6a18ec2bf
Size

42KB
MD5

10411baa94e9bb8876452eb6a18ec2bf
SHA1

bd819e0a77cf2b745870285a30144d94326064fa
SHA256

1f64b3fcb36a7d60dd19c8117441976409d972f19da13ec510a4ab4d92894b90
SHA512

11668ebb7b02d59cff38fbae8934394e8320a2b4da36de6f56e7bb763ca6db6f50ec4563a52caace20d994c705544bfc9a259aadf084a761149697f8860fc7b5
SSDEEP

768:MAj/leFzg6C3ZVHHxs8bMdy1qQKEhcll2jh4Hycq1o9+s:/leFzgXuEoll2N4SPon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10411baa94e9bb8876452eb6a18ec2bf

Files

10411baa94e9bb8876452eb6a18ec2bf
.dll windows:4 windows x86 arch:x86

2ec2bab46642aa0c25c3fe741dca8b7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetCurrentThreadId
GetTickCount
LCMapStringW
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
RtlUnwind

user32

MessageBoxA
GetSystemMetrics
SendMessageA
GetUpdateRect
GetProcessWindowStation
wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ