12857764a1a11eac49607edfcc63503d | Triage

Sharing

General

Target

12857764a1a11eac49607edfcc63503d
Size

15KB
MD5

12857764a1a11eac49607edfcc63503d
SHA1

11a57b3e07f3398019f614f102b98a2cfbebe2ff
SHA256

4bbd71f2106f6bf188f9930cf4695ee99a1ca0613ddf7a8bfb6a8e2437703dd0
SHA512

98fc884127932dfab204c011a063a74bbf144b0254318fbe43e0895b60431cd6fbdafba788ff68c500be06aa3273d34ee38a067084f6d334a65f05178bb205cc
SSDEEP

48:6GZ/3qUj7l+vaankvSo1X68qBBkmWZbEmGFoxOnftzBq7:d/aUj78v3yS4DqBBMZXZaftzQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12857764a1a11eac49607edfcc63503d

Files

12857764a1a11eac49607edfcc63503d
.exe windows:4 windows x86 arch:x86

75425eba3977a336dc6c3f1c3bcbbf37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ