11f8a984acae1acc6f53dc2b3b0cf42d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f8a984acae1acc6f53dc2b3b0cf42d
Size

49KB
MD5

11f8a984acae1acc6f53dc2b3b0cf42d
SHA1

32b1bc04f3a34779240001147d242dea3116e541
SHA256

ee766b858c7c61f5188f82bfab4b0d74fd043246fae65150d46bd82a88692081
SHA512

15ab1dbd612936f49e743f87d8adc24d82283a6809b18e66df1ce43618f90123ed952bee4a75a46fe1e1fab2f119cbe4c072a4597d0bf94726a11106799af944
SSDEEP

768:hAZDI2FfAeMnvAKX0FVNakJHBEGgEQmdWTLuMdEpuDkaQIbvz0:hAdIIfynvAFxa0hERWIHdEAgaQyz0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f8a984acae1acc6f53dc2b3b0cf42d

Files

11f8a984acae1acc6f53dc2b3b0cf42d
.exe windows:4 windows x86 arch:x86

6764baeb8d960aa00c9977cb9882bb94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE