c11dad6439cc948ccf5d9601a2ae0ee3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c11dad6439cc948ccf5d9601a2ae0ee3
Size

22KB
MD5

c11dad6439cc948ccf5d9601a2ae0ee3
SHA1

40f30738c9e15038d8a10e9949079f5000fd3811
SHA256

00641733e2beffd3df368df14d22ca7f75d1f353cf4661be9a854658fb7f7e1a
SHA512

fbcbc0b7b1ec7c2d5c8c629c067942e2849afc519eac3ffe47c2b54248ae0dbe196f19a89d9224d49a41343a832d356a0bb9e44791d176f416f266be78bd1181
SSDEEP

384:sCGp3OwK+/2iMsRJeQswi+EJd89T5LcgrGSJ9eOK3mrKB42tWOryUxnq:G3O9T3QswiXJe9trtJ9FGnt3Nxq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c11dad6439cc948ccf5d9601a2ae0ee3

Files

c11dad6439cc948ccf5d9601a2ae0ee3
.dll regsvr32 windows:4 windows x86 arch:x86

9c0432e1910a7f6b5d39ec1826872d5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetProcessHeap
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
Sleep

Exports

Exports

Control
DllRegisterServer
FreeBuffer
Release
Start
StopW

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ