11eb8cb45e454333fdbc5fd558336c61 | Triage

Sharing

General

Target

11eb8cb45e454333fdbc5fd558336c61
Size

47KB
MD5

11eb8cb45e454333fdbc5fd558336c61
SHA1

c8c0c7b6c1c67eee2f128f23ffcd17856ddc56d3
SHA256

792a041d919d11c541c9a0e98e5c1476d9dba38ebf71d816a01e036b4f1fbf01
SHA512

a306a5cddfb356c043e0319234cfbce15d4e2c27f0b901abc868ffbac949e7fb09ac64ecc2a13ce6d1f9b33c95bf772014649119efa348634b5a02b1f8efddb3
SSDEEP

768:A4MP+3k+qp+B2IR9osFYEARpAuI92/4+aRG6+hujcd9Zd3rTt9V:A44+MnKYEiAuI92/KRGzhd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11eb8cb45e454333fdbc5fd558336c61

Files

11eb8cb45e454333fdbc5fd558336c61
.exe windows:5 windows x86 arch:x86

7c2bc85599e9567a0508d3a84089c116

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ