12814e1e0df753382d65b5b654112be4

General

Target

12814e1e0df753382d65b5b654112be4
Size

3.3MB
MD5

12814e1e0df753382d65b5b654112be4
SHA1

a1516167a86f7d946e39b101ada7c103475ab953
SHA256

bf1b5c25daacf827b0e6f47daab6d371ec940e8f4d2a619dcf22ec94e591f3d6
SHA512

d150748ff2cae2f3ed6516da8ba1a07f8c5ed63e58b1b58b644415ab7f096ebc8f3ba03e62a409f88e92907452039c25d99bc868b184ece48f2a78558c4c62fa
SSDEEP

49152:+jNFS7nqP8n9Og3TUt0pfHGoq1s+zbGAAmo/H2QArhJ0d2egBMZRb2HM48hTI+CQ:269HpfmoCuxJ2TWgPHy/nm3IM8u4+ZB6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12814e1e0df753382d65b5b654112be4

Files

12814e1e0df753382d65b5b654112be4
.exe windows:4 windows x86 arch:x86

a6c91c20682b4fa4e504ee6f17718956

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetWindowsDirectoryA
GetTempPathA
GetSystemDirectoryA
GetModuleFileNameA
DeleteFileA
CloseHandle
MoveFileExA
GetTempFileNameA
Sleep
GetCurrentThreadId
CreateFileA
GetTickCount
SetFileAttributesA
WriteFile
SetThreadPriority
CreateThread
SetCurrentDirectoryA
CreateDirectoryA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
FlushFileBuffers
InitializeCriticalSection
DeleteCriticalSection
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetStdHandle
SetFilePointer
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile

user32

GetInputState
GetMessageA
PostThreadMessageA

shell32

ShellExecuteA

wininet

InternetReadFile
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
HttpQueryInfoA
InternetOpenUrlA

winmm

timeGetTime

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6c91c20682b4fa4e504ee6f17718956

Headers

File Characteristics

Imports

kernel32

user32

shell32

wininet

winmm

Sections

.text Size: 45KB - Virtual size: 45KB

.rawdat Size: 3.3MB - Virtual size: 3.3MB

.rsrc Size: 3KB - Virtual size: 4KB

.text
Size: 45KB - Virtual size: 45KB

.rawdat
Size: 3.3MB - Virtual size: 3.3MB

.rsrc
Size: 3KB - Virtual size: 4KB