5c12c2177dbbca92a50eb15acd6c7e99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c12c2177dbbca92a50eb15acd6c7e99
Size

126KB
MD5

5c12c2177dbbca92a50eb15acd6c7e99
SHA1

0e0a72cfea089bdf160ff238943b88279f13ea62
SHA256

14a5778f405ae272d40c96d308318a6cd83f2cb6d02f077916e5ed4b38c837b1
SHA512

582883482d798b54b83bdb53b0b2cd4537acb0580e45f3438c43f4f1d61667d7efdf01021cc7983ac6978b6b0feb715de323ea0f515b49c382f4961bbbf5c0b6
SSDEEP

3072:JtB32w6a/o71CUoQwgiccdBWz6fM2xw1Q1:fBGw68Q1oQbHcdBmoJw1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c12c2177dbbca92a50eb15acd6c7e99

Files

5c12c2177dbbca92a50eb15acd6c7e99
.exe windows:4 windows x86 arch:x86

2b2541a594b95ca7adf220993c2a0369

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW

user32

GetDCEx
GetCursor
GetDC
GetTopWindow
GetClipboardData
GetCursorPos

kernel32

InitializeCriticalSection
LoadLibraryA
LoadResource
GlobalFindAtomA
VirtualAlloc
HeapAlloc
ExitProcess
HeapFree

Exports

Exports

_NKWUAvAAMWJhm@16
dKMAy9nE_k@20
_QfOeKMtKir
Vil8Fh@20
_GAvjFU@16
_LKGfeNU8Xq9@16
_2x1BX

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ