11571df7faf33d9fb2ba65f5a3355e99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11571df7faf33d9fb2ba65f5a3355e99
Size

20KB
MD5

11571df7faf33d9fb2ba65f5a3355e99
SHA1

334a177108c3a42fae847c69e604bf35773fefab
SHA256

41ae80180f50530db20e3e7adea15e011db472a2c07ba0b2410bd1029157efeb
SHA512

f4ba7e549a9b29b164cdb0f3c64484cadaafcf3070ee1f3b00d5ca5542e05c6b630d05cecbc631d1fc66bef1bfb974a4163b4f9710bd3ac352d8d8f2e06d09fa
SSDEEP

384:Vb3e+X0tSIRSdw8p0lJ63nJlrBiBjK3UVRHgJcCHegK2JulnfWjvOeo:he+X0f2RpDfBAIUTgJcBV20ln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11571df7faf33d9fb2ba65f5a3355e99

Files

11571df7faf33d9fb2ba65f5a3355e99
.exe windows:4 windows x86 arch:x86

ea428250884fd7746a25682bffca7603

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetFileAttributesA
GetTempPathA
lstrcpyA
CloseHandle
lstrcatA
WaitForSingleObject
GetCurrentThreadId
WriteFile
SetFilePointer
CreateFileA
lstrlenA
GetModuleFileNameA
LoadLibraryA
RtlUnwind
ExitProcess
GetModuleHandleA
CreateEventA
SetEvent
CreateThread
GetVersionExA
ExitThread
GetProcAddress

user32

wsprintfA
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
ShowWindow
CreateWindowExA
SetThreadDesktop
CreateDesktopA
CharToOemA
DestroyWindow
PeekMessageA

advapi32

RegCloseKey
RegCreateKeyExA

shell32

SHGetFolderPathA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ