12021e29d6ff3af7a4e35b5045ce52c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12021e29d6ff3af7a4e35b5045ce52c5
Size

64KB
MD5

12021e29d6ff3af7a4e35b5045ce52c5
SHA1

029e9756639bcbb79bfdf4373492b854212b9d39
SHA256

b729125953370ce3c01bcf935ee7963cb02b5a517d5b4d4401702d7bd7caa998
SHA512

5a22e65f42b91868d19d46cab873bde3d64b57fef76c5f63f6199cd120c27928b94d4f2d55b674119286613508b90a56fcde81376bcdd56719448818850f4c1c
SSDEEP

1536:SRILgemBD0EWrGPClY9OOGRkGfEiiyyl/nSRt:qdARrW8ICRkchiF4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12021e29d6ff3af7a4e35b5045ce52c5

Files

12021e29d6ff3af7a4e35b5045ce52c5
.exe windows:4 windows x86 arch:x86

6764baeb8d960aa00c9977cb9882bb94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE