12849a5a7feb7184c7337b830ab8951e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12849a5a7feb7184c7337b830ab8951e
Size

335KB
MD5

12849a5a7feb7184c7337b830ab8951e
SHA1

18d509064561db082d2b3780f84b039cfcf9c4c5
SHA256

98bf02a2fba16d9bef3a90ff8cd0b2e8bbec45a42ef35a88476f443fe4613380
SHA512

1c3eb249be01e6f8879fe8d26bf2fc27a754334322ef4ee3447a9450bd3dd790ab0a5793d42e02cf63507874080b69750be17f70a63eee175c45f1e264615464
SSDEEP

6144:FEs8kCh1A2w8pQp5UzxsRPqUOJrvsWWB4wCEl7NPFkYK3sNP:mZ3h1ttCq6+5vsbBgEllFQct

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12849a5a7feb7184c7337b830ab8951e

Files

12849a5a7feb7184c7337b830ab8951e
.exe windows:4 windows x86 arch:x86

cde0a219f8ff2e695c89dba0042b6865

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
WriteFile
ReadFile
SetFilePointer
CreateFileA
GetTickCount
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
Sleep
GetTempPathA
lstrlenA

shell32

ShellExecuteExA
ShellExecuteA
SHChangeNotify

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ