12cfe368a7da2d40980ecfc3eb1b4ee3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12cfe368a7da2d40980ecfc3eb1b4ee3
Size

45KB
MD5

12cfe368a7da2d40980ecfc3eb1b4ee3
SHA1

3b8ae3264147ce8cbb51af4519d4c2eda1889820
SHA256

8d627c74606942f5d8ee963e6a601c2d938a943a91b01ec41fd52606144e443e
SHA512

4d0eba77339ea6d2cc704809138fab81cbdd73a301c9b8a9ace14e96e08f305db1b32ef7620c6a7217ac54058391b4e8f476b0f3cc18eb292eb0773a1238e0ed
SSDEEP

768:d15PoojWC9Ll8xtMWTNCP/VC4GwBUFbjiFe47y8BUvW:b5gNFxtMWTNC1C4TBUgFe47yA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12cfe368a7da2d40980ecfc3eb1b4ee3

Files

12cfe368a7da2d40980ecfc3eb1b4ee3
.exe windows:4 windows x86 arch:x86

cfef8918eb06fe9cd292b786655a4658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

CODE
Size: 17KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE