11ead31b2ddc85d7f0abbb1910c9893c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11ead31b2ddc85d7f0abbb1910c9893c
Size

5KB
MD5

11ead31b2ddc85d7f0abbb1910c9893c
SHA1

1711ee49ec7a674868ae33d2bbb99e33b190779c
SHA256

9207d0df96f79496caca100cb2536f763967888f8fc3d0c3685efed0ade116b9
SHA512

21619042f617029b9c61deb5360c879ad8a0680ab2593d56c7ce846bbffe75f0fae91bf4c3848efb9e837eaae54e34a87e4ac8b4e2270c3f3c8df0284a4eef94
SSDEEP

48:6NwRypQ1xvwyXlXMkiDFwfBDq9JCIUtTwxwzZwDrpOfve:AQ1xo8Mkix4FqXCIuTwxwaDrpO3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11ead31b2ddc85d7f0abbb1910c9893c

Files

11ead31b2ddc85d7f0abbb1910c9893c
.dll windows:1 windows x86 arch:x86

0ed11c14a2759c69bfa93dd64e1f1654

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetEnvironmentStringsA
CloseHandle
GetSystemDirectoryA
OpenMutexA
RtlUnwind
WinExec

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
sprintf
strcpy

Exports

Exports

_q

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 624B - Virtual size: 624B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 136B - Virtual size: 136B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 68B - Virtual size: 68B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ