c12d0d30e6b1b5567ceafab35[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c12d0d30e6b1b5567ceafab35.exe
Size

341KB
MD5

8c9254a116f9520cc37be334270eebb4
SHA1

8dfb4c3ce0fa13ce53b7d3d3a2cddd5775035da7
SHA256

c12d0d30e6b1b5567ceafab35f60f0ce7893f75c29bcaf8021a32035131b9d05
SHA512

45f6cf0e57f7b03f23cdbfada666fad8813bb10085ad5ce585a7b2f34a3741db6e438fb6ea8b421cb2b3cdf6ead6eb994b2e6bd056a89c18ecbe9f49a068de1f
SSDEEP

6144:XpmkvyyVfNYlU8t2u4g1yqWwlharTntDqqTMT/16HM70Zzj:ZBHV6Jt2Z9qlha/n11wkM701j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c12d0d30e6b1b5567ceafab35.exe

Files

c12d0d30e6b1b5567ceafab35.exe
.exe windows x64

0f2b840e0c0c09e9a1bc529ac66e379e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateFileA
CloseHandle
GetCommandLineA
GetComputerNameA
TryEnterCriticalSection
GetCurrentProcessId
LockFile
CreateNamedPipeA
WaitNamedPipeA
ConnectNamedPipe
DisconnectNamedPipe
ExitProcess
VirtualAlloc
CreateMutexA
OpenMutexA
ReleaseMutex
GetLocalTime

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ