11cf3473f4fc768f9da43e4effc2cb55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11cf3473f4fc768f9da43e4effc2cb55
Size

250KB
MD5

11cf3473f4fc768f9da43e4effc2cb55
SHA1

85633c962cac9ae3d02a4507b91faa4973b5b7c7
SHA256

66b05f4d9cfd20d0d087043d9a5f10ac5b294bb91948693b9293111129692109
SHA512

aaea4f72100fef455010a28a2c9f28fb84245146101a6711351469cfaf0fc1018581232d956de15aab87308b09c46646c9817b92566360b85da1a7cf8ba69229
SSDEEP

3072:RHl1XXRcTglvmWrEVq1+pUCSj9bOdPc/rcIcCVYSEwyUPEl5sLAXrRt8x6o7PivJ:5lVXRcXWiVS5OVyLcCV7aUP8+M2ppp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11cf3473f4fc768f9da43e4effc2cb55

Files

11cf3473f4fc768f9da43e4effc2cb55
.exe windows:5 windows x86 arch:x86

e97b9d7a50364ad36a6a31341ce0658c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
LoadLibraryW
GetLastError
LoadLibraryA

msvcrt

memcpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1
Size: 512B - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.2
Size: 512B - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.3
Size: 512B - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.4
Size: 512B - Virtual size: 7B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data3
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ