11a620009f22da448d9ecf2846b5d770

General

Target

11a620009f22da448d9ecf2846b5d770
Size

163KB
MD5

11a620009f22da448d9ecf2846b5d770
SHA1

0e6e78c265337385e2a1b315404f0a4fabf60f5a
SHA256

f083dafea28d04e60eafcf88e30e0f4b65bc3f36f8864ebf57580ebac9e3955c
SHA512

ce4c9570286a766ee13cb876b814eba3141647741e46b9924733d66847e275de71e6924587c9eada003578441d09854ac3d4c6e5cde464ee49b9eceea5d3b53f
SSDEEP

3072:9lqlXUCkuHTXXbLBV/Q1+Zg9k4/sb9ja3N85V0kLAhd76DTxysXcdSQ5u:9slECkuTvTZ6vd3wyzL76Prcd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11a620009f22da448d9ecf2846b5d770

Files

11a620009f22da448d9ecf2846b5d770
.exe windows:4 windows x86 arch:x86

a466126d99f89f3a15ef004525a9ba62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

user32

CopyRect
DispatchMessageW
PeekMessageW
SetRectEmpty
GetClientRect
OffsetRect
ReleaseDC
TranslateMessage
FillRect
GetDC
IsRectEmpty
wsprintfW
GetWindowRect

kernel32

GetModuleFileNameA
GetSystemTime
InterlockedDecrement
GetShortPathNameA
LocalAlloc
LocalFree
GetTempPathA
DisableThreadLibraryCalls
DeleteFileA
SetFileAttributesW
LoadLibraryW
GetProcessAffinityMask
GetProcAddress
WriteFile
WaitForSingleObject
CreateMutexA
CloseHandle
GetTempFileNameA
LeaveCriticalSection
GetCurrentThreadId
EnumResourceTypesW
InterlockedIncrement
GetCurrentProcessId
GetTempPathW
CreateFileA
FreeLibrary
GetLastError
ReleaseMutex
SetFilePointer
GetTempFileNameW
TerminateProcess
QueryPerformanceCounter
OutputDebugStringA
ReadFile
OutputDebugStringW
WideCharToMultiByte
CreateDirectoryA
GetFileAttributesA
SetFileAttributesA
MultiByteToWideChar
GetTickCount
CopyFileA
GetVersionExA
lstrlenA
EnterCriticalSection
GetSystemTimeAsFileTime

avifil32

AVISaveOptions
AVIMakeCompressedStream

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a466126d99f89f3a15ef004525a9ba62

Headers

File Characteristics

Imports

winmm

user32

kernel32

avifil32

Sections

.text Size: 94KB - Virtual size: 94KB

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: 64KB - Virtual size: 64KB

.tls Size: 1024B - Virtual size: 100KB

.text
Size: 94KB - Virtual size: 94KB

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: 64KB - Virtual size: 64KB

.tls
Size: 1024B - Virtual size: 100KB