12441db05281c64ef180ddf1dbc7b580 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12441db05281c64ef180ddf1dbc7b580
Size

281KB
MD5

12441db05281c64ef180ddf1dbc7b580
SHA1

0cab053fb3efc052b2696292368c737f52eb5c2d
SHA256

5adf69b4edc10ae9b3a3dca18dba3426e4e6b69ecab011afb399f8ea962775a3
SHA512

5d1b74287109ea2172d0bfa90df3e3585f2bb1903c5723c0cf1ca743d6e225c400405f767a42933f1b2f494b9e7e13cab6e7b4a1b9603e1267949e259e8b64b1
SSDEEP

6144:e+UUptScFW9nxN3juJdYdrkJyjYhE5xSDQKL1dIF3nSC8:L/PFW9nnjuJdCrKhAxSDQKJdUJ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12441db05281c64ef180ddf1dbc7b580

Files

12441db05281c64ef180ddf1dbc7b580
.exe windows:5 windows x86 arch:x86

9dec5d1226362bcfdd179fe0b02e88e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DuplicateTokenEx

kernel32

lstrlenA

shlwapi

PathCombineW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfW

user32

DispatchMessageA
ExitWindowsEx
GetDlgItem
GetKeyboardState
GetKeyState
GetMessageA
GetWindowTextA
GetWindowThreadProcessId
LoadCursorA
ToUnicode

Sections

.unmhwh
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkv
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jiz
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ