12b79055b15b54ecbcd62170150b3f89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12b79055b15b54ecbcd62170150b3f89
Size

31KB
MD5

12b79055b15b54ecbcd62170150b3f89
SHA1

0a76065f0115d93565be3b8f5536f1ce639aced6
SHA256

d8e13525510be902db743c81f5c5a1d97249fbccb0d9d4412f9829a2573f4db6
SHA512

4b6ce3ecebd264e463a773b4e9cd358e523ac707a1251844c0e3f52113765dc3327b3f746b376a80b205293f65ce465ab37576749b4a5f366c990f9d1218db17
SSDEEP

768:0cOiCehfi3C8os/Foz/JES0zBT8nyVZc1fjOvzGGAZ:hHhfiyS9oz/JEbFTwQZ4SvzGvZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12b79055b15b54ecbcd62170150b3f89

Files

12b79055b15b54ecbcd62170150b3f89
.exe windows:4 windows x86 arch:x86

abd344c74b373dfcd8d793b9730723ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
GetCommModemStatus
VDMOperationStarted
PeekNamedPipe
GetProcessVersion
GetThreadTimes
EnumSystemLanguageGroupsA
GetSystemTimeAdjustment
GetProcessShutdownParameters
DeviceIoControl
OpenMutexA
BuildCommDCBAndTimeoutsW
SetCalendarInfoW
CreateToolhelp32Snapshot
SetCriticalSectionSpinCount
SetEvent
GetTickCount
LocalSize
SetVolumeLabelW
WriteProfileStringA
GetVolumeInformationA
Module32FirstW
EnumTimeFormatsW

Sections

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ