12fc357ab5f7a1f80bafb898b25663da

Sharing

Copy URL

Twitter E-mail

General

Target

12fc357ab5f7a1f80bafb898b25663da
Size

1.3MB
MD5

12fc357ab5f7a1f80bafb898b25663da
SHA1

e6cd04d4f92ff5d12729e1c0453d1229ed78509f
SHA256

e307899a4589310a3c7e5917655ab7f8edfe522417bc0183f54e6fe70beb3fe1
SHA512

7e1c2e95c305ddccac5ac8d749d7e161d6bde9b13eff4ff17d8907df6db0fbc11e546214cfd6d8a2105c8db5cd63036b06042f232b2d2c55f12c9c5f2c50d04f
SSDEEP

24576:YAwWPdcwSwQx/8/H8TNzR6LSuBqQwKFq9nYytw71Q6TFb:QwcZz0WvKcNYoqQ6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12fc357ab5f7a1f80bafb898b25663da

Files

12fc357ab5f7a1f80bafb898b25663da
.dll windows:5 windows x86 arch:x86

38fded6ecfd1b5755111e6ab33635550

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

xpcom

NS_CStringSetData
NS_StringContainerFinish
NS_StringContainerInit2
NS_CStringContainerInit
NS_CStringContainerFinish
NS_CStringGetData
NS_Free
NS_Alloc
NS_GetServiceManager
NS_GetComponentManager
NS_StringContainerInit
NS_StringGetData
NS_StringSetDataRange

nspr4

PR_AtomicDecrement
PR_AtomicIncrement

kernel32

GetStdHandle
ExitThread
InterlockedCompareExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
CreateFileA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
DeleteCriticalSection
GetProcAddress
LoadLibraryA
CreateFileW
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetCurrentDirectoryA
GetFullPathNameW
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
CreateThread
GetModuleFileNameA
HeapSize
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetTimeZoneInformation
VirtualAlloc
HeapReAlloc
CloseHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer

user32

SetWindowLongW
ShowWindow
CallWindowProcW
SetWindowTextW
MoveWindow
GetWindowRect
SendMessageW
IsWindow
IsWindowVisible
CharUpperW
wsprintfW
SetWindowPos
SystemParametersInfoW
CharLowerW

Exports

Exports

NSGetModule

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38fded6ecfd1b5755111e6ab33635550

Headers

File Characteristics

Imports

xpcom

nspr4

kernel32

user32

Exports

Exports

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 109KB - Virtual size: 109KB

.data Size: 12KB - Virtual size: 39KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 137KB - Virtual size: 136KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 109KB - Virtual size: 109KB

.data
Size: 12KB - Virtual size: 39KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 137KB - Virtual size: 136KB