d11ce19c2cc3ec751a71d5c0c2c15490N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d11ce19c2cc3ec751a71d5c0c2c15490N.exe
Size

28KB
MD5

d11ce19c2cc3ec751a71d5c0c2c15490
SHA1

135a459c47773b8c239ce128a07a788c45779717
SHA256

9d6b783ef13d074ce976a27dc7554972e264ad82a360b7c158d21a32270a135e
SHA512

12051b6f15ea8c4e852068da32e0f5799cc130559483cd4371e9425f953efe7b1dea1af0d12fe0d4b5a19cf8a44400ec05c53a355d908874a94bf19a5550026b
SSDEEP

384:ctz3+pmuMgm4PHgTfhl1IBxRlHzZN2zVqOPjKpGFaLco:6zQMQWlqBxRlHzZN2zA+oGF8co

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d11ce19c2cc3ec751a71d5c0c2c15490N.exe

Files

d11ce19c2cc3ec751a71d5c0c2c15490N.exe
.exe windows:4 windows x86 arch:x86

e3ba6c037c9f90379e6d8a4d6f1fe2f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextW
SetCapture
GetActiveWindow
IsChild
SendMessageA
MessageBoxA
DefWindowProcA
TrackPopupMenu
LoadBitmapA
TranslateMessage
DispatchMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
FlashWindowEx
GetKeyState
TranslateAcceleratorA
RegisterClassA
CreateWindowExA
GetDlgItemTextA

kernel32

HeapAlloc
GetModuleHandleA
HeapCreate
CloseHandle
ExitProcess

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE