122ed3420eeb113bbcd29970f11ab679 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

122ed3420eeb113bbcd29970f11ab679
Size

11KB
MD5

122ed3420eeb113bbcd29970f11ab679
SHA1

1358c54ed7c5a88af625ba9bd4cceaa8084ff50b
SHA256

6f89df52e1b0723f04963fc5dbc55a2dd3f0dea2601add7e2f4045b974ec9fe0
SHA512

ed722cb4b270442cd8fa2b70b019059385a689fe9353947f1c46298b2b59bbe8360b674439a4571cdbefdd9f358c83a80aa81ff1be1d5f3c5cf06b621d6ad2aa
SSDEEP

48:6bk6ks/84Cye6MBoLL6zUCBX34PZ0YmEaUwiaqlIdSTf9Bv7:Cksz/6zUC93iWLbUN6dSBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
122ed3420eeb113bbcd29970f11ab679

Files

122ed3420eeb113bbcd29970f11ab679
.exe windows:4 windows x86 arch:x86

a8ad693bf3b8adc2d596efb901f48374

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontFamiliesW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ