12134e7a7f5ff74226c34ed200d1264d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12134e7a7f5ff74226c34ed200d1264d
Size

268KB
MD5

12134e7a7f5ff74226c34ed200d1264d
SHA1

9e62e9037d95f02844499b2af0cf8999031c341e
SHA256

2fa3968ab896d089fb5c3c0fa91bfdaa0fd7f7eca81827a0e3d4618f09f9db02
SHA512

362e3a9cea286df84b65aaced1f0f15237f43ab164b73fe359ef42dc46a5baff3ea1a211e38a95cc2329e446a6086306325ca6046944fba139cc2176a95b7515
SSDEEP

6144:vBC2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uTIP7:vBC2EB0NxDIBuOFe7/uTIP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12134e7a7f5ff74226c34ed200d1264d

Files

12134e7a7f5ff74226c34ed200d1264d
.exe windows:5 windows x86 arch:x86

a2f3b8ca9ae0d2c1e4c3bb2f0ce14718

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_c_exit
_exit
_XcptFilter
_cexit
__winitenv
__wgetmainargs
_initterm
__setusermatherr
wcslen
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
vwprintf
_iob
fflush
iswprint
wcscpy
exit
wcschr
wprintf
_adjust_fdiv
tolower

kernel32

GetModuleHandleA
GetLastError

ole32

CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitializeEx

setupapi

SetupDiGetClassDevsW
SetupCopyOEMInfW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 257KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE