11ecd1ed2958ab885991ace232a32cf0

General

Target

11ecd1ed2958ab885991ace232a32cf0
Size

32KB
MD5

11ecd1ed2958ab885991ace232a32cf0
SHA1

49c8bc01beb4910b48ec9f6eb2109858210c77b6
SHA256

383b921862f9034444bf11926a55086782ef91219368fbc4a1ff27169b6022fc
SHA512

378f0419c09ba7b634fbde8c7109d372b1dd692ba6e6b6d3b3cecaa8271ff58f855851372c3663d990fd5b38c15f4f10f066f1220bfc276f9aeb9ff0aaac90c9
SSDEEP

384:wSwyF1FZlW+HtUgnWHOfx39B2aDJ5CFmT24FUX490vBZW6PhQNvBs:PFHWcpl59BLGgv2tZZW6PhYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11ecd1ed2958ab885991ace232a32cf0

Files

11ecd1ed2958ab885991ace232a32cf0
.exe windows:4 windows x86 arch:x86

2535378669007eb3f4063922e56ce490

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CloseHandle
WriteFile
ResumeThread
lstrcpyA
GetShortPathNameA
CreateFileA
GetModuleHandleA
GetStartupInfoA
DeleteFileA
GetCommandLineA
GetSystemDirectoryA
GetModuleFileNameA
CopyFileA
lstrlenA
SleepEx
LocalFree
CreateProcessA

advapi32

RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA

mfc42

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
_findfirst
_mbsrchr
_mbsicmp
free
malloc
fopen
fputs
fclose
memcmp
strncpy
exit
memset
_except_handler3
??1type_info@@UAE@XZ
_purecall
_EH_prolog
__CxxFrameHandler
strcpy
strlen
strstr
sprintf
_setmbcp
_CxxThrowException

ole32

CoCreateInstance
OleRun
CoInitialize

oleaut32

user32

wsprintfA
ShowOwnedPopups
EnableWindow
SetParent

Sections

Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2535378669007eb3f4063922e56ce490

Headers

File Characteristics

Imports

kernel32

advapi32

mfc42

msvcrt

ole32

oleaut32

user32

Sections

Size: 28KB - Virtual size: 28KB

.rsrc Size: 512B - Virtual size: 4KB

.avp Size: 2KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.avp
Size: 2KB - Virtual size: 4KB