12kI719[.]exe | Triage™

General

Target
12kI719.exe
Size 322KB
Sample231113-lml1dscc97
SHA256 ddbb6f467a5ff0e61d6846af254bc836546640e3c18a82e09e2c947bbb924009
MD5 1e8b6d8222b32e8ef97dbc50e88471a2
SHA1 28c190ec34a0a965b28fc2a2e4ce0bb88d3652b7
SHA512 2669b9b1832d4b883663b2d251c166c939b67fc11088c81c5007437780c53531bc3f1b750aadcfdd3db1e35dc91830732304a143acf47d75e2127a99a48351db
SSDEEP 6144:qab74kR2Dc1Ls9LV9LEUggjLHL8o4zzPXBfrZGrCyO7Ud3:Pb3JoLrEUggjLezZFyO7Ud3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12kI719.exe

File Explorer

12kI719.exe

.exe 322KB

12kI719.exe

IMPHASH 6f77f9ec6f274a10c54e15892efc836e
SHA256 ddbb6f467a5ff0e61d6846af254bc836546640e3c18a82e09e2c947bbb924009
MD5 1e8b6d8222b32e8ef97dbc50e88471a2
SHA1 28c190ec34a0a965b28fc2a2e4ce0bb88d3652b7
SHA512 2669b9b1832d4b883663b2d251c166c939b67fc11088c81c5007437780c53531bc3f1b750aadcfdd3db1e35dc91830732304a143acf47d75e2127a99a48351db
SSDEEP 6144:qab74kR2Dc1Ls9LV9LEUggjLHL8o4zzPXBfrZGrCyO7Ud3:Pb3JoLrEUggjLezZFyO7Ud3
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

15085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

gdi32

GetDCBrushColor

user32

ValidateRgn EnableWindow WindowFromDC

advapi32

RegSetKeySecurity

kernel32

CreateFileW WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess CloseHandle WaitForSingleObjectEx GetExitCodeThread InitializeCriticalSectionEx GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetConsoleMode RaiseException RtlUnwind GetLastError SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW CompareStringW LCMapStringW GetProcessHeap SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP DecodePointer

Sharing