5a11af522b3de38bc9e6e754c010d0f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a11af522b3de38bc9e6e754c010d0f5
Size

647KB
MD5

5a11af522b3de38bc9e6e754c010d0f5
SHA1

8560849089d1268f5727655ee5ac06cbf615965b
SHA256

b3eb5050f2fb047a993eaab0aac80c3c5ddacd6878cf7ea54cd60a78510d88ed
SHA512

e9d0e6680722a1c646673264c2c0391a9349bd657a1356a1f1f6f91ae563f3163860bb9155f931258f5aa5bf97841bb1ec5525630f7976a49da159a315e27f9c
SSDEEP

12288:39+c0UPRCuoVy3asTylO35vARjVBi7Dwq3HbdiAtYac4Hg/8zBb/PkRjr5:eUPR5oI3VCOpvw5B03xiAtYacMxop

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a11af522b3de38bc9e6e754c010d0f5

Files

5a11af522b3de38bc9e6e754c010d0f5
.exe windows:5 windows x86 arch:x86

013201fb1bb30e98f5b0c59aaf61fb18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

CharNextW

gdi32

UnrealizeObject

version

VerQueryValueW

netapi32

NetApiBufferFree

ole32

OleUninitialize

comctl32

InitializeFlatSB

msvcrt

memset

shell32

Shell_NotifyIconW

winspool.drv

OpenPrinterW

wsock32

WSACleanup

Sections

.text
Size: 617KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE