12b6dafa26cffd0f3c51c939603205f4 | Triage

Sharing

General

Target

12b6dafa26cffd0f3c51c939603205f4
Size

48KB
MD5

12b6dafa26cffd0f3c51c939603205f4
SHA1

4a6a3a0d2fe8258df0be283b55fb2fb266e2f0a4
SHA256

b97d007d1fb516a5a8b1b39e8d9ede7844de67fe9f55facf7c1023dc97464d90
SHA512

5c0fadb52dbd02d778826d687249de4e61875cdbc4d97c5f01c9fc7218ea7e16cff17b6aca9bb3f0b587849b7269bba2461de28bd97ac6aa5ab6df890d605706
SSDEEP

768:KH8uCdY3tCVyJtsG/IIWbEKIPPrAuamStmtsL29sS:KcuCy33Jt5obRIPjADFmt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12b6dafa26cffd0f3c51c939603205f4

Files

12b6dafa26cffd0f3c51c939603205f4
.dll windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA

Exports

Exports

Init
Proc

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ