12943599c6e699b9c7f3b3ea7ccd59d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12943599c6e699b9c7f3b3ea7ccd59d8
Size

114KB
MD5

12943599c6e699b9c7f3b3ea7ccd59d8
SHA1

2f40d2a1be11cfd095f10a02c73209e8bfb71282
SHA256

26bc4dca5f0b323d6d9fb64825cd337714bcd474ad70a785c70c0e532d090521
SHA512

30188e5e51f5890a0e2af0559a7fd9655ef337d81846699612e7d2c8bba18804eeb8bf0069d9c091d4b34ae890af2a514e7168aedcf6bc02a6a361fe59abb2f1
SSDEEP

3072:D3gYHuXjd/cPjgC4iZFhdU0237zFHQf8DKZGAvhmO:5U/cr74qFvzQ7xHQYSGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12943599c6e699b9c7f3b3ea7ccd59d8

Files

12943599c6e699b9c7f3b3ea7ccd59d8
.exe windows:4 windows x86 arch:x86

f447edc0772cee288d161d574f63321f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegLoadKeyA

user32

GetActiveWindow
IsWindowEnabled
GetCursor

shlwapi

SHDeleteValueA

oleaut32

SafeArrayUnaccessData
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayGetElement
RegisterTypeLib

kernel32

GetVersionExA
VirtualAlloc
GetProcAddress
GetLastError
ExitThread
GetModuleHandleA

comdlg32

GetOpenFileNameA
ChooseColorA

version

VerInstallFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

CoCreateInstanceEx
CoUninitialize
CoDisconnectObject

gdi32

RestoreDC
BitBlt

Sections

CODE
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 393B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE