11f535224ea8eeb698714fbf56ccc138 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f535224ea8eeb698714fbf56ccc138
Size

485KB
MD5

11f535224ea8eeb698714fbf56ccc138
SHA1

470cbfdf5cf9029302db04a5871840e55f2a1bc7
SHA256

739c5dd5ce4879b88cff37aa70cd786c9b57f90e61ea79f1cc339dfd0dc97949
SHA512

1fdb79651a32b4d927aa388f2b949f02f49021976d37ef52dce68dfa45a9b7dda73fa9cacdd99871a871e90d17d3afbbcc27446e4ba637f8f930a6c03f5b47f9
SSDEEP

12288:FJrMrMHuHaPFdEB0ELgSs5hM6/CMrgsCReb:FJrMrM3P7NSh6/CBsE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f535224ea8eeb698714fbf56ccc138

Files

11f535224ea8eeb698714fbf56ccc138
.exe windows:4 windows x86 arch:x86

d4a84db4fec706017461c0e97df062ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExA

comctl32

ImageList_SetIconSize

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

oleaut32

SafeArrayPtrOfIndex

user32

WindowFromPoint

wsock32

WSACleanup

Sections

CODE
Size: 477KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE