11b856128f5282fb991b02f3ac007ade | Triage

Sharing

General

Target

11b856128f5282fb991b02f3ac007ade
Size

68KB
MD5

11b856128f5282fb991b02f3ac007ade
SHA1

fa2d35b939402c591a2e3fe6ab9cb21bf1a845aa
SHA256

83b5efe38cc3f8881a96fbb114f18fece3f9f3e74806fb48b1610bb90b6b452c
SHA512

e6460efbe7cea2c76e51ce3e74da347fa0076eede5971798771a9de34d0b136bd4f1900c6ee2de42db8eeca1add5d93670e35da736425d97a7a4f5f80e02ce48
SSDEEP

768:ITDDn3f3KK58yH8NiZtFlzbIMaJycQWp48V5wh9XnUn585JTvjfOR:ITPvKE8m8gPoqWpNTwh9XnA8517fOR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11b856128f5282fb991b02f3ac007ade

Files

11b856128f5282fb991b02f3ac007ade
.exe windows:4 windows x86 arch:x86

d19c35bfc4cce490671743f1ba2eb7b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetLastError
GetProcAddress
LoadLibraryA
GetStartupInfoA
GetModuleHandleA

advapi32

RegEnumValueA

msvcrt

_controlfp
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ