11cd3c605893ceb762c0364d2a69c431 | Triage

Sharing

General

Target

11cd3c605893ceb762c0364d2a69c431
Size

120KB
MD5

11cd3c605893ceb762c0364d2a69c431
SHA1

8f4818fe01dbffb7e8562c0d462c4ca9012bb0a0
SHA256

1e3df6f32d7441c3d164b8a46b975fe66f1636a656b0bb5c4e1e1f69bc384e22
SHA512

233ea0ea1a44c5588311691876b5ca571edc8ac806b95501d829ab8ad55a46a34a1e20a254b36e25768f570e99f4b6e14d92d1951567f55cc0c158f86dc815c3
SSDEEP

3072:zAK0CBezOU+8isBve4bF3u5jwaaHw7Koj4rIPQFy:83z+svb1uzPQFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11cd3c605893ceb762c0364d2a69c431

Files

11cd3c605893ceb762c0364d2a69c431
.exe windows:65535 windows x86 arch:x86

01c346d3fd4dc239e01e38adb74cfd72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetDateFormatA

msvcrt

__setusermatherr
__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
_initterm

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsr1
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE