12afbb7bf32a18db617e7b93de000489 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12afbb7bf32a18db617e7b93de000489
Size

254KB
MD5

12afbb7bf32a18db617e7b93de000489
SHA1

b6bcc4a4f3887e23d20a0a5f4689419237cf29db
SHA256

0f0337169e8ac149bba04016d1ec3756f88ac54182be007c0f18e76a4589f894
SHA512

6f9a6c0503a912a5a23ff9d9437b00a89db3c93c3aa2c39b40da77e656fa9518a9108558ddcaf7e08da12e6676d66587808d457ac0e74f253b9bf1b4d2fb5947
SSDEEP

6144:AajdMJb6SqIqOq2eJCdlCgyVQr1sonNwb:92JbM2yYl9yqVNwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12afbb7bf32a18db617e7b93de000489

Files

12afbb7bf32a18db617e7b93de000489
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE