12a52e10fa4be4807310eddc23ff60a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12a52e10fa4be4807310eddc23ff60a4
Size

184KB
MD5

12a52e10fa4be4807310eddc23ff60a4
SHA1

1f61750406a58e71e181361e78baa36767fcdee8
SHA256

72e4a119f3b10c9f8e1e0af717680b623b7c4aebcf7b14ca44fa18f5b1fc0e1b
SHA512

d6ae295f50153d194a1bb074810fc2448bdc1ab1e6ffa888946db66ee64981dbd18952b38e57584c7dd677063d687145396f58ec9ff157534dbde77c99d105d1
SSDEEP

3072:PDlCRfUrPPAmXDxY0cmr0ap3rLDB1Dszp800OLFKWIYjgrZMBFHmrqJkyLTYMpGc:bE8rPNXDtYap3XDB110PRjcCGeJDFtP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12a52e10fa4be4807310eddc23ff60a4

Files

12a52e10fa4be4807310eddc23ff60a4
.exe windows:4 windows x86 arch:x86

6f7bae63eebb0fb074f94659c7e654b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
FlushInstructionCache
VirtualProtect
GetTickCount
GetLastError
GetProcAddress
LoadLibraryA
Sleep
LocalAlloc
LocalFree
VirtualProtect

user32

wsprintfA

Sections

7("+:bxW
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T(o]8=3]
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

fCF!R`8I
Size: - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

=_=Ky<p;
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

B6TmP?Oy
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE