12347b789d2e99efeafc5300bf96d470 | Triage

Sharing

General

Target

12347b789d2e99efeafc5300bf96d470
Size

63KB
MD5

12347b789d2e99efeafc5300bf96d470
SHA1

67d820d0eded39ebda7254195c3d09c1986d1063
SHA256

2cd49bcae55fe7870023abc9b6fc4e38a0a8063db35813d7ee25bcb47aa8c0fe
SHA512

fb093eec5680a1bf2fe72cac3ed690bd65500e66199882147898b168d038e7b215737bf0b3ca87f2750ef677e094ec90fbf10d0d49b510fdbfba97f0384ed962
SSDEEP

1536:TffffS4/IiDYMo/T2hM3Z1mjVwpCCwlb7nhfYAu8dDpJcbzLXKC8:TffffN78MzS3/mjVUCrd72KBp+bXav

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12347b789d2e99efeafc5300bf96d470

Files

12347b789d2e99efeafc5300bf96d470
.exe windows:4 windows x86 arch:x86

0607aeb336386917a4d7c4ae3a53b851

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
VerifyConsoleIoHandle
ActivateActCtx
GetExitCodeThread
OpenConsoleW
SetCommMask
HeapLock
GetConsoleAliasesLengthW
GetEnvironmentStringsA
CreateDirectoryA
GlobalLock
InterlockedPushEntrySList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE