112fd3878ebf15646d294188ac3ad3e2 | Triage

Sharing

General

Target

112fd3878ebf15646d294188ac3ad3e2
Size

80KB
MD5

112fd3878ebf15646d294188ac3ad3e2
SHA1

a12edd6846a849773fd920b6509bdcc03d20a4d5
SHA256

57d22761629a3605d7b7daea47b9502e55c02ffedaf12bac9ad92c87805f070b
SHA512

4898a91f5fcd4e0d0b649adfc56b3feb51f49ca1af9481da207b17c8f7536077ff80b266f3f3db73f741f31dc138007884d5eb90e3a789b586331edb5e90d408
SSDEEP

1536:AyDcR3laCDO9YdwE8phf8TCbYQVvJu82hW8fPL:J4NlWhE8r8TCUQ68vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
112fd3878ebf15646d294188ac3ad3e2

Files

112fd3878ebf15646d294188ac3ad3e2
.exe windows:4 windows x86 arch:x86

386e7dc009b0f042f53be0427cc0ffc2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
GlobalFix
LoadLibraryExA
GetFileAttributesW
OutputDebugStringW
DecodePointer
GetPrivateProfileSectionNamesA
ReadFileScatter
CreateVirtualBuffer
GetTapeParameters
EnumSystemLanguageGroupsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE