11f1c0679f8963db258996c17346ec5a

Sharing

Copy URL Twitter E-mail

General

Target

11f1c0679f8963db258996c17346ec5a
Size

103KB
MD5

11f1c0679f8963db258996c17346ec5a
SHA1

503d41a0ef98f7f3125825636479865fb8d0b3a8
SHA256

8db4955149abb8f790db06f409f52a943045e10cb708e7a4d4aa01938846d7e7
SHA512

596aad39b10cfa09ccc9b6ac6991fe8b23d5eb7f81b2d3bb644278cb4c4c19ebad3f6d233729ac6e9ba09f489ff9089dcc5d089fb76e81bc6f7c1fb6cc4e86d1
SSDEEP

3072:TZyIDJPKNcHLiK8/i+m6GHTD4WMSgQxZ1bad:Fy0JSK8/+60ssE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f1c0679f8963db258996c17346ec5a

Files

11f1c0679f8963db258996c17346ec5a
.exe windows:4 windows x86 arch:x86

7d1f20fe365c7fa18c0bbfeae1567ca6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantChangeType
SafeArrayPtrOfIndex
GetErrorInfo
SysAllocStringLen
SafeArrayUnaccessData
SysReAllocStringLen
RegisterTypeLib
SafeArrayGetElement
OleLoadPicture
SafeArrayCreate
SafeArrayGetUBound
VariantCopyInd
SysAllocStringLen
RegisterTypeLib
SafeArrayPtrOfIndex
SafeArrayUnaccessData

version

GetFileVersionInfoA
VerInstallFileA
GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA
VerInstallFileA

gdi32

CopyEnhMetaFileA
CreateCompatibleDC
CreateDIBSection
GetDCOrgEx

user32

GetCursorPos
GetCursor
IsWindowEnabled
GetCapture
GetScrollInfo
IntersectRect
AdjustWindowRectEx
SetWindowTextA
UnhookWindowsHookEx
LoadKeyboardLayoutA
GetMenuItemInfoA
GetMessagePos
OemToCharA

comctl32

ImageList_DrawEx
ImageList_Write
ImageList_Read
ImageList_Remove
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Create
ImageList_Write
ImageList_DrawEx
ImageList_Remove
ImageList_DragShowNolock
ImageList_Remove
ImageList_Write
ImageList_Create

shell32

SHGetDiskFreeSpaceA
SHGetFileInfoA
Shell_NotifyIconA
SHGetSpecialFolderLocation
DragQueryFileA
SHGetFileInfoA
Shell_NotifyIconA

ole32

GetHGlobalFromStream
OleRun
StgCreateDocfileOnILockBytes
MkParseDisplayName
CoReleaseMarshalData
CoCreateGuid
CoUnmarshalInterface

shlwapi

SHDeleteValueA
SHDeleteKeyA
SHGetValueA
SHQueryValueExA

kernel32

ExitThread
GetModuleHandleA
GetACP
GetProcAddress
GetLastError
VirtualAlloc
Sleep
ResetEvent
GlobalAddAtomA
HeapFree
CloseHandle
GetStdHandle

advapi32

RegEnumValueA
RegDeleteKeyA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
FindTextA
GetFileTitleA
ChooseColorA

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 575B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d1f20fe365c7fa18c0bbfeae1567ca6

Headers

File Characteristics

Imports

oleaut32

version

gdi32

user32

comctl32

shell32

ole32

shlwapi

kernel32

advapi32

comdlg32

Sections

.text Size: 29KB - Virtual size: 28KB

DATA Size: 1024B - Virtual size: 575B

.edata Size: 70KB - Virtual size: 70KB

.rdata Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

DATA
Size: 1024B - Virtual size: 575B

.edata
Size: 70KB - Virtual size: 70KB

.rdata
Size: 1KB - Virtual size: 1KB