112f0569edaea1d760477bca006a336e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

112f0569edaea1d760477bca006a336e
Size

34KB
MD5

112f0569edaea1d760477bca006a336e
SHA1

48b822a94551c3f6270175101a4036380958d81a
SHA256

844fce6096ad824664e92bd01ef680e95d158da3be1ead3ca0effe25e92f0c1b
SHA512

b380c4d633f9c1a33938393cb8a0ed8510a3e6c13b83133ccd3655803760e05a95e98b2c2646215ef89bfca1f9ff68f5744920718effd6af75387b467eb13fd9
SSDEEP

768:JX4tGq5d8Gpzp5zdzNQ/G39/NTSj3xnhxuNEgZwKJAXM:N4tNd8GZp5hyIxZSDxhx12FJAXM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
112f0569edaea1d760477bca006a336e

Files

112f0569edaea1d760477bca006a336e
.exe windows:4 windows x86 arch:x86

e70141ab519d9cf2b39bb99f5f719502

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
lstrcpynA
CreateDirectoryExA
SetComputerNameExW
GetEnvironmentVariableA
GetBinaryTypeA
OpenWaitableTimerW
GetStringTypeExA
SetDefaultCommConfigA
EnumCalendarInfoExA

user32

MessageBeep
IsWindow
LoadAcceleratorsA
IsRectEmpty
SetSystemMenu
UserLpkTabbedTextOut
InvalidateRect

shell32

SHFreeNameMappings

gdi32

DeleteObject

Sections

.code
Size: 9KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ