12600dfe90adcee19029e379bc805497 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12600dfe90adcee19029e379bc805497
Size

691KB
MD5

12600dfe90adcee19029e379bc805497
SHA1

e87f6d860e6ff3358cb3d96dd15a7f2777f7959c
SHA256

8aeef423f8cd655c84de9d4904f2a2d4b8c870bd8c2fc76a067fcc55cef80dfa
SHA512

7880695aa395fd9a29e29306613bcf826f14dad9f3068eafbfb439832460efb5c25c56ef07ec94f6d45fbcd99af8b300010ea9c8425605b6947a3d104ea308df
SSDEEP

12288:N6gSarN5Atce3ZLOA+ipDm6wrXLT4msbcG/6PyWnoOZ2Yv3uidFkl:N6gVBeJaZSwrn4NJ6a8oY2mBkl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12600dfe90adcee19029e379bc805497

Files

12600dfe90adcee19029e379bc805497
.exe windows:4 windows x86 arch:x86

e3afa66aa7aaefece0f1d93c65d25ce0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
CreateEventA
GetStartupInfoA
lstrcatA
LocalFree
CloseHandle
GetVersionExA
GetFileSize
GetCommandLineA
LocalAlloc
FreeLibrary
lstrlenA
GlobalFree
GetModuleHandleA
Sleep
GetLastError

msvcrt

__set_app_type
_except_handler3
exit
_adjust_fdiv
_XcptFilter
_c_exit
memmove
__getmainargs
wcstoul
toupper
__p__commode
__p__fmode
_acmdln
rand
_exit
wcschr
_controlfp

gdi32

SelectObject
SetBkMode
CreateCompatibleDC
GetStockObject
GetDeviceCaps
BitBlt

user32

ScreenToClient
DestroyWindow
SetFocus
GetFocus
LoadIconA
EndPaint
DialogBoxParamA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 672KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ