011de8acbfa5357abbd1e54290546b35acabf7768cfa87162c079a2ce1ded430 | Triage

Sharing

General

Target

011de8acbfa5357abbd1e54290546b35acabf7768cfa87162c079a2ce1ded430
Size

64KB
MD5

b6989678dab7336371099d789c33c9af
SHA1

13cec713925eb7fb7af4f797ec1e08502aa11be6
SHA256

011de8acbfa5357abbd1e54290546b35acabf7768cfa87162c079a2ce1ded430
SHA512

ab3a739e51890afc8a0a56d88e118fa680e9f160fba1b7a1431ed9d52dfb6318052be4541bf326a8de89504e066a2fe20cf5028d2c28607b6c8e434d780375ce
SSDEEP

768:zTAiYUVaQDKVSputCPsED3VK2+ZtyOjgO4r9vFAg2rqcjeZ8GswSD7KkOGKaOWgS:HAqamKwugYTjipvF2PeojGEgS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
011de8acbfa5357abbd1e54290546b35acabf7768cfa87162c079a2ce1ded430

Files

011de8acbfa5357abbd1e54290546b35acabf7768cfa87162c079a2ce1ded430
.exe windows:5 windows x86 arch:x86

b54757880e34d193f6c36b5f50a2be11

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

CreateColorTransformW
CreateProfileFromLogColorSpaceW
CreateDeviceLinkProfile

gdi32

SetWindowOrgEx
GetWindowOrgEx
CreateDCA
CheckColorsInGamut

kernel32

ExitProcess
GetConsoleCursorInfo
GetProcAddress
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ