7111f0046191c372430561d11f2e695f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7111f0046191c372430561d11f2e695f
Size

132KB
MD5

7111f0046191c372430561d11f2e695f
SHA1

8b39a6d7fb3e66a8ac202f18473f5c827ad92e76
SHA256

006cb58f0db624a1f14242707b62719edb15fa8d00fc14ae73634288f65df575
SHA512

834fe876f1e9329d662620531ab27db39f6bef1ee801a8f234e4a3f08fbdaa4f81fbb66f7eb9de7aca79c3470696683cfdec43d66ea8e20bc125efee2d0d8429
SSDEEP

3072:6/EFyW/Mxtb5wMQ6Kke81zNNxeh6P+2g:6NWkWf6/zAhn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7111f0046191c372430561d11f2e695f

Files

7111f0046191c372430561d11f2e695f
.exe windows:4 windows x86 arch:x86

18ee7cfaccb5a05668e0749e19f1b9a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
VirtualProtect
CreateEventA
LockResource
LoadResource
LocalFree
CreateMutexA
FindResourceA
HeapFree
GetCurrentProcess
ReleaseMutex
VirtualProtectEx
VirtualAllocEx
ExitProcess
VirtualAlloc
VirtualFree
GetModuleHandleA
CreateThread
HeapAlloc
CreateFileA
GetFileSize
GetProcessHeap
GetStdHandle
InterlockedExchange
RtlUnwind
VirtualQuery

advapi32

GetUserNameA

user32

PostMessageA
DispatchMessageA
TranslateMessage
GetMessageA
SetWindowTextA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
GetSystemMetrics
PostQuitMessage

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ