12c0e3d22d33562883f8f4826952bfb1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12c0e3d22d33562883f8f4826952bfb1
Size

352KB
MD5

12c0e3d22d33562883f8f4826952bfb1
SHA1

27df6bc3b1d524459d2a195ed087b489a9a10fa7
SHA256

7b95c597bed8e3f6e6ace62775d65a4844b8ede8054dcaef9bef04a35a68be63
SHA512

c252247f57317bb5d2dc4b931c35c608ec129a9bdf3743d958a15433c605c320132a1e68eb37de959bae6f919842cb74350a50d51796e28c281c44bdb0cc7c36
SSDEEP

6144:X7UyKiOefPBPaF9dqBFQfSkmgF6TJJ6Q/dpXJYd0wshgEpAXKhPTKrl:XgyKzMP4q3Sz9IsQ/dxJYdwhhHo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12c0e3d22d33562883f8f4826952bfb1

Files

12c0e3d22d33562883f8f4826952bfb1
.exe windows:4 windows x86 arch:x86

88043ccc60a06052f7662d0871108e69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

winmm

timeGetTime

wsock32

WSACleanup

Sections

.text
Size: 328KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE