211adde41cee6c26641f4b34c2139ef4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

211adde41cee6c26641f4b34c2139ef4
Size

156KB
MD5

211adde41cee6c26641f4b34c2139ef4
SHA1

06054c2d92dcbdbf2e29fc414aef62191b385936
SHA256

e3be6a82ffb6f145e2cdba923026a432dea3a175240b4fe5211c10ee1055940d
SHA512

41c25689fd64f3fd4a9e15929dd39a107f13d7d170e27ecb2c7f609c874e7237042fad2d54e33c8b29d6c7c7fb666a633a2fa4e93b10bfd4a8c53c3fac49bca6
SSDEEP

3072:FctrGj0DJveHG/I3QsYVcuAmr4sPUb0w9uQ4lT4+hEBoKFJYtgia:F6GwReHGAA32uAGhAp9uQyEjYJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
211adde41cee6c26641f4b34c2139ef4

Files

211adde41cee6c26641f4b34c2139ef4
.exe windows:4 windows x86 arch:x86

9f474e981056768c002ece3190021928

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject

user32

MessageBoxW
GetUpdateRgn
CreateWindowExW
GetDC
GetWindowInfo
RegisterClassExW
LoadCursorW
EndDialog

kernel32

FindFirstVolumeA
HeapCreate
GetPriorityClass
GetStartupInfoA
EnumResourceTypesW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsFree
GetFileType

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ