11f3c736dc78c417c02db52640306530

Sharing

Copy URL Twitter E-mail

General

Target

11f3c736dc78c417c02db52640306530
Size

55KB
MD5

11f3c736dc78c417c02db52640306530
SHA1

9cc5b43986800d7034e5f0994fb14e6e5860db9f
SHA256

1d29d35971d074c55b2d92676b44ac3b05152bf49016362dbb7bb5ad40e24792
SHA512

76f90a17acc846c0dcef7ab8cc13f42d413d6e37e3b43ea2f9c1678a38ab881743bc2e6aa1446084d404aea89a8803ed9655b25a647f57733558951a374dda67
SSDEEP

1536:8366M1A489qSfA3aY7JIl7V/9LI5RznX4Eo:C6zf8jA3n7ij9LI5FXb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f3c736dc78c417c02db52640306530

Files

11f3c736dc78c417c02db52640306530
.dll windows:5 windows x86 arch:x86

a910600eaffa9a40d7a36e2998c39038

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSetInformation
SetFilePointer
ReadFile
GetModuleHandleA
InterlockedDecrement
CreateIoCompletionPort
ConvertDefaultLocale
GetSystemDefaultUILanguage
HeapSummary
HeapDestroy
VirtualQueryEx
UnmapViewOfFile
GetFileTime
CreateNamedPipeA
GetFileAttributesA
IsValidLocale
GetSystemDefaultLCID
LeaveCriticalSection
CreateFileMappingA
InterlockedIncrement
HeapFree
EnterCriticalSection
WaitForMultipleObjects
TransactNamedPipe
HeapCreate
HeapAlloc
GetLocaleInfoA
GetSystemDefaultLangID
InitializeCriticalSection
HeapQueryInformation
MapViewOfFile
ConnectNamedPipe
CreateFileA
RtlZeroMemory

gdi32

CreateCompatibleDC
Arc

user32

IsWindowEnabled
IsRectEmpty
DrawIconEx

clbcseng

ImmCreateSoftKeyboard
SdbCloseApphelpInformation
ImmGetIMEFileNameA
ImmGetIMCCSize
ImmSystemHandler
ImmSetActiveContext
ImmGetConversionStatus
ILSaveToStream
OpenRegStream
SdbFindNextTag
CtfImmIsCiceroEnabled
SdbReadEntryInformation
ImmShowSoftKeyboard
SdbOpenApphelpDetailsDatabase
CtfAImmIsIME
PathQualify
SdbGetDatabaseMatch
DuplicateIcon
Control_FillCache_RunDLLA
PathResolve
ILCombine
CDefFolderMenu_Create2
PrintersGetCommand_RunDLL
SdbGetStandardDatabaseGUID
GetPermLayers
IsNetDrive
SdbFindNextMsiPackage
CtfImmLeaveCoInitCountSkipMode
ILFree
IsLFNDrive
CtfImmGetGuidAtom
SdbRegisterDatabaseEx
DragQueryFile
ILGetSize

Exports

Exports

CreateProcessNotify
fingsmui

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a910600eaffa9a40d7a36e2998c39038

Headers

File Characteristics

Imports

kernel32

gdi32

user32

clbcseng

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 2KB - Virtual size: 4KB

.data Size: 14KB - Virtual size: 16KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 2KB - Virtual size: 4KB

.data
Size: 14KB - Virtual size: 16KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB