12cb486e08aceea42a1d3a2ce7eaea69 | Triage

Sharing

General

Target

12cb486e08aceea42a1d3a2ce7eaea69
Size

888KB
MD5

12cb486e08aceea42a1d3a2ce7eaea69
SHA1

00dddccfb0d47c296db963ae91cd9530dde9e61c
SHA256

fbf0388628cb2dfc1457adee1af6c5ca5ba58338f9e80b5fc496a5ead2e8c8ea
SHA512

d4577f9189388e0d74217120ef65233ceeba8b9b71c38f6b1346f2faec8d1df18a47d96f94f9e3eedfb7dbe245b63f0e121dd2ad83aaa03f3fb9982edad193c4
SSDEEP

12288:vRu10z5N3Sy5/dehF8ACG0EJKjS+UPweBMW+FEyXeiksBEc:vQSNiy5/dGoRtjSFPw7JFVS/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

12cb486e08aceea42a1d3a2ce7eaea69

Files

12cb486e08aceea42a1d3a2ce7eaea69
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 885KB - Virtual size: 885KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ