12f11dbea3cedc39d1337a0eed9bf0e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12f11dbea3cedc39d1337a0eed9bf0e2
Size

132KB
MD5

12f11dbea3cedc39d1337a0eed9bf0e2
SHA1

3ab13e74c768b02c4c0fc7d7659fc9af381a603b
SHA256

eb0e4ebbbdd1a9619693a7bb2aa4c12233f82d27118d29d441cb91ecf43a39f9
SHA512

55fa650ae70c2f16450e8d5c288d03816c91d8f3ccfd6113b62ff7c578ccef4f022597acc22cad3fef7a15715d467ab155a85da94d800feddbedecb5037cfcfa
SSDEEP

3072:7Imjz2ODQEd40s9QFozQgDpSUMzf+9tg6yN9w:HyOne191QGpSRb+g629

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f11dbea3cedc39d1337a0eed9bf0e2

Files

12f11dbea3cedc39d1337a0eed9bf0e2
.exe windows:4 windows x86 arch:x86

d877e70d3b716a04e5b79b8c553c913a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetNamedPipeHandleState
LocalHandle
BindIoCompletionCallback
GetProcessVersion
GlobalWire
ConvertThreadToFiber
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

PESEC0
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PESEC1
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ