11826a3a136834cb38f3e9771cddcca3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11826a3a136834cb38f3e9771cddcca3
Size

118KB
MD5

11826a3a136834cb38f3e9771cddcca3
SHA1

43eeb3fdbea564fd9db2dbfc6882fff23696fd1c
SHA256

1efa32a6d58e2d109b18fab5438f490b94ec5e60cbfd4fa144c068f0b96b2506
SHA512

17a3e605a4bfed09547aec3267402c84b6418c9c76bf01613ed45a2b5739670f51317eacec37075419abb95c75e9f8a40d92c1fd58f4d705f144b6fe4825c009
SSDEEP

3072:qec9cdR5MbbKGINqrx4OdgcHFJzHTCIdV9Z4A:Ag5obKGSqyOdXv7T775

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11826a3a136834cb38f3e9771cddcca3

Files

11826a3a136834cb38f3e9771cddcca3
.exe windows:4 windows x86 arch:x86

dc19e10eacce193ce6d23063fcb13b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableScrollBar
GetTopWindow
GetActiveWindow
EndPaint
IsMenu
EnumChildWindows
LoadIconA
IsWindowEnabled
LoadCursorA
CreatePopupMenu

kernel32

LoadLibraryA
VirtualFree
WideCharToMultiByte
GetThreadLocale
WaitForSingleObject
VirtualAllocEx
VirtualAlloc
SizeofResource
VirtualQuery
GetCommandLineA

shell32

Shell_NotifyIconW
Shell_NotifyIconA
DragQueryFileA
SHGetFolderPathA

Exports

Exports

aaUhu1gEcsZtg@8

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ