12118d3c739750eeaf9a83a53f68e03c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12118d3c739750eeaf9a83a53f68e03c
Size

20KB
MD5

12118d3c739750eeaf9a83a53f68e03c
SHA1

a18186cf9eb1be7560b3cd4515e605d9ff78cb9e
SHA256

b1cc7d28d818af79fd0defbca483fd4eb0ae8d8aa0455f79c263389cfee8e57b
SHA512

9f25691730c3dc4aec5a97db0474a5fd469a978ec1de2a1b5afd28825981ae258e0c0bff30a9cc7be93921293433187b455d718566eebcf703bdfbde46fda17d
SSDEEP

384:HoTYoVov+jTt5Z+774izeGKoc4yPEK2ROl0szto:HsjVov+jT/e4Ec4yPp2cl0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12118d3c739750eeaf9a83a53f68e03c

Files

12118d3c739750eeaf9a83a53f68e03c
.exe windows:4 windows x86 arch:x86

24f3f445ead6e0b158e17a9d79151243

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
SetEvent
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
lstrcpyA
lstrlenA
SetFilePointer
SetFileAttributesA
RtlUnwind
ExitProcess
CreateThread
WaitForSingleObject
GetVersionExA
WriteFile
ExitThread
GetTempPathA
CreateFileA

user32

EndPaint
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
ShowWindow
CreateWindowExA
SetThreadDesktop
CreateDesktopA
CharToOemA
DestroyWindow
wsprintfA
IsWindow

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ