11bea3484509527b6fce5d8e0053c359 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11bea3484509527b6fce5d8e0053c359
Size

22KB
MD5

11bea3484509527b6fce5d8e0053c359
SHA1

b7685c1b71c1385177e5933f7fb208da08fe7d4a
SHA256

caee8480eb9123fd082c494a558ca61147686d0d059fb00788f9eaf26c30d0e2
SHA512

681299f419b6942aa6f02844dfe7cd4c40c17cb6c5f345a10bd2d12adb42f370be4a3f07546c438bc4b1653cfeb5d485ac5cf682d50b838f4f6f8bc94b3338e0
SSDEEP

384:SRYxbA6L1iqXQHAa//CnN9Cj6hs9uBbaLH7eit1HsL2/GgqB0Po5V4:xxb7iBD//YN9Cj6/BmjZ1x7qaPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11bea3484509527b6fce5d8e0053c359

Files

11bea3484509527b6fce5d8e0053c359
.exe windows:4 windows x86 arch:x86

39c87c5cea161696eacaa4d7cdc6a324

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

kernel32

GetMailslotInfo

user32

MapVirtualKeyExW

gdi32

ExtTextOutW

advapi32

RegCreateKeyW

shell32

ShellAboutW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ