11905dbfce8c397cb054a4d6f0271a08 | Triage

Sharing

General

Target

11905dbfce8c397cb054a4d6f0271a08
Size

371KB
MD5

11905dbfce8c397cb054a4d6f0271a08
SHA1

6ee497abb6e319a59ec9c9e98ab78b91e8cb4d07
SHA256

cb1938f702d4041b8f784276e7cfd0a4534dd049d11179667dbf794108e4d868
SHA512

fb7c76401175a6f21407e959e0c949a031a60db58ce6693029cbd893b1dc2406a609faa92a117a401ca3901c46744c39c8a22458c331b3ab4661e87a94b13548
SSDEEP

6144:3lut4EP3V3n9q2BLDmnERbEH0zNldUfhPqbMTFxlbSl5Shv7ujRr4OC8:3AjfVNzD2izNldUfhAMhxJSA7uNpl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11905dbfce8c397cb054a4d6f0271a08

Files

11905dbfce8c397cb054a4d6f0271a08
.exe windows:4 windows x86 arch:x86

ee5f9c6a873072772a2ecd6113d177dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetModuleHandleA
GetConsoleCP
CloseHandle
LocalFree
CreateFileMappingA
FindClose
GetACP
GetConsoleAliasA
GetCalendarInfoA
WaitForSingleObject
CreateFileA
LocalLock
LocalUnlock
LoadLibraryExA
HeapCreate
GetLastError
FreeEnvironmentStringsA
FindAtomA
TlsGetValue

user32

CascadeWindows
GetDC
GetDlgItem
PostMessageA
ScrollWindow
GetIconInfo
GetMessageA
CallWindowProcA
DefWindowProcA
CreateDialogParamA
IsWindow
SetFocus
DispatchMessageA
DrawIconEx

msasn1

ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecCheck
ASN1BERDecEoid
ASN1BERDecBool

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ