12a7a1759cc2c877ac64c0487354a872 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12a7a1759cc2c877ac64c0487354a872
Size

263KB
MD5

12a7a1759cc2c877ac64c0487354a872
SHA1

bb47315e2844438c07745f733ea2ab5de0c4e8a7
SHA256

02f57b4d076e1eb487f74ff54e30f7ff6863599fdaf8a68082cbb620803bc4e8
SHA512

46aa725b55ab1770492d5fe29481642c0403d62ab4a575b6d99e21a135d4c1c8b3e8726de3f2cd0e610346cc224a96f3fc867359ae22388a2e223d5d596fcfeb
SSDEEP

6144:PGqUmKgTEyq+IXLc6izbgYaOGZXWUGX9aQ:PGxmKeEydIXI6iz/twXBG8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12a7a1759cc2c877ac64c0487354a872

Files

12a7a1759cc2c877ac64c0487354a872
.dll windows:1 windows x86 arch:x86

71ddcf11713c972f804a6ed54880aaa0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

wsock32

WSACleanup

iphlpapi

SendARP

Exports

Exports

Start
Stop

Sections

CODE
Size: 256KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE