12c7f3112b551675c76bd1d4b798c080 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12c7f3112b551675c76bd1d4b798c080
Size

76KB
MD5

12c7f3112b551675c76bd1d4b798c080
SHA1

e8506c8229cbdff15382e3737d4dfcdf5d3d0b9f
SHA256

dc6ea5e5e43a7a88783a2c094c72b17b3b10f204905683ab0d687999d7f3ff9a
SHA512

ab3b82791bc79c9b57f5ed485186d683ced7b60502a0dad0928bfccc6f7ea6fee438c7d6766883f965bd6674c80f28a0b135a61f9f3eeefa4f8f46f69f371e10
SSDEEP

1536:cu5wSSSBAD2aE6XjcqT8IO2kB7NbCGTkJmOUA3tKP2zpQ7mvgamGcBc3FagnL8gU:DLjmpGUZS2yG6GBckoHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12c7f3112b551675c76bd1d4b798c080

Files

12c7f3112b551675c76bd1d4b798c080
.exe windows:4 windows x86 arch:x86

f0b0fc8ff4f42b7d59df688e04ace5b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryA
OutputDebugStringA
SetTapeParameters
SetCommConfig
CreateThread
BaseCleanupAppcompatCacheSupport
GetNumaProcessorMap
EnumSystemCodePagesW
AddConsoleAliasW
lstrcmpiW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE