11b00b2fc9c6e22d3cea9395efccad58

General

Target

11b00b2fc9c6e22d3cea9395efccad58
Size

78KB
MD5

11b00b2fc9c6e22d3cea9395efccad58
SHA1

5beae1eba5b6033208755003af3f02104b5c629f
SHA256

e215745900486c4313910b912fcb525874ee807b71651b23ded7ba87f3e1e130
SHA512

b6237a55f440af3159bef846d573f6ee0ac44da53febf43febb0aee8cc950c8037872704ec0eba7cd8242ce0d899de70f7fcc75bcac6be97a594841cb5a85bd5
SSDEEP

768:2+riy0VK7szxcPVYnzaeAdaUzIQBycAJ67Yjaq6thFpkV1iRuGSOTSDXpbhI7LX7:J0wYnzdAdaI/4JJmMaqKhr9uGzT2E7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11b00b2fc9c6e22d3cea9395efccad58

Files

11b00b2fc9c6e22d3cea9395efccad58
.exe windows:4 windows x86 arch:x86

5439a910176eaf5961b5110bdc733ad2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrChrA
StrStrA
StrToIntA

mfc42

ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord5714
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord823
ord825
ord1576
ord2976
ord1168

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
__CxxFrameHandler
time
srand
rand
_setmbcp
_controlfp

kernel32.dll �

GetStartupInfoA
SetFileTime
GetModuleHandleA
CloseHandle
lstrcatA
GetSystemDirectoryA
WriteFile
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
lstrlenA
lstrcpyA
ReleaseMutex
GetFileAttributesExA
WaitForSingleObject
GetLastError
CreateMutexA
ReadFile
SetFilePointer
GetModuleFileNameA
DeleteFileA
GetFileTime

user32

PostThreadMessageA
wsprintfA

ole32

CoCreateGuid

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5439a910176eaf5961b5110bdc733ad2

Headers

File Characteristics

Imports

shlwapi

mfc42

msvcrt

kernel32.dll �

user32

ole32

Sections

.text Size: 12KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 12KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 16B