11c6eab0b71f483abfbb9677c7a6153a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11c6eab0b71f483abfbb9677c7a6153a
Size

100KB
MD5

11c6eab0b71f483abfbb9677c7a6153a
SHA1

f80815e9a6c0c7004afee2531abaa4fd2943a8ce
SHA256

7866078c9a3e1aa5941cf81a70655cee0941f72eb8607febd6f0bae4635e4a5a
SHA512

168d8ea94b736bc569b91a4a74ba8ae970438e86246678d9970bc9233f878f8584b46c144864725a22bd0b90f598e26eef312aaf9ee0ac5450332cf05be26384
SSDEEP

384:GwthvcG1LBB0MwK0+5oNylUE11hLsDdxCFpuk4dmpG3y80//+vxVWtK:GwtP6slFdsDdxvdmE1i/Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11c6eab0b71f483abfbb9677c7a6153a

Files

11c6eab0b71f483abfbb9677c7a6153a
.exe windows:4 windows x86 arch:x86

80d9d468a2b50c5efdc5cd89ea56ee8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ExtractIconExA
InternalExtractIconListW
RegenerateUserEnvironment
SHFormatDrive
SHGetSpecialFolderLocation

kernel32

CreateFileMappingW
ExitProcess
GetProcAddress
LoadLibraryA
VirtualProtect

user32

GetDesktopWindow
GetSystemMetrics
IsDialogMessageW
MessageBeep
SetWindowTextW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 490B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE