12cea0fe3c008e6683acf527d949f501 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12cea0fe3c008e6683acf527d949f501
Size

80KB
MD5

12cea0fe3c008e6683acf527d949f501
SHA1

24114face984722f1d1a7e163cb17f0704e32e0e
SHA256

98ce6cb40f7ae338de6921c9d18f09568c9ae46f63ca2c8d09d90278d3903dc3
SHA512

7c3c1ae34dc7a5b8e6e7d82d48afcfd761a2a9cc72aa62c75be7bac57d1c5ed843cdc2d0c705b9036d818d52d4ba92f50bc8e96d674e82aaaa8e981dbdda6c5e
SSDEEP

1536:WtkL/HPZmkoZ9g2GgmY17XBcyYzOrpmwtPvPWrVrPN:WSLokoZa2RmYxXpbDZvPWJ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12cea0fe3c008e6683acf527d949f501

Files

12cea0fe3c008e6683acf527d949f501
.exe windows:5 windows x86 arch:x86

af8bbd0bb63d711ec662564a312a9c2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
WriteConsoleOutputAttribute
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA

user32

GetUpdateRect
GetTopWindow

Exports

Exports

Qepexxfxh
CloseYbvxjmmsc
OpenOlhhmvqu
Vpfpmceiof

Sections

.text
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 800B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata1
Size: 66KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrd
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ