12cb5cc07796dfdf1ac3fc4dadfc481c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12cb5cc07796dfdf1ac3fc4dadfc481c
Size

24KB
MD5

12cb5cc07796dfdf1ac3fc4dadfc481c
SHA1

6bafb1af460d52f60d81d300367f55df02a48d15
SHA256

4c6e21bf6dfc3e3dc57e4709a76699d9894da48670d6da2aa6ffc1c7f47878a8
SHA512

34961fe7343bdd61aa4cbe7dc5da417e42d46d8091eb97c1c1670a1493bc575365712538bfb42ca41211bc0b8f64f2a541d8a56d0f19f1dccf67bb132c11e69b
SSDEEP

192:8zrpiTvxX3RtCiHaZudx52K9Eds8/TXyA2NKUrwNy+gNA+cIP1oyGYvKQ9Z1:BUyJAD+1QYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12cb5cc07796dfdf1ac3fc4dadfc481c

Files

12cb5cc07796dfdf1ac3fc4dadfc481c
.exe windows:4 windows x86 arch:x86

e8ff98d59f35944a04b568d82522efa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetLongPathNameA
GetTempPathA
CloseHandle
WriteFile
CreateFileA
CreateProcessA
GetModuleHandleA
GetStartupInfoA

msvcrt

sprintf
rand
srand
time
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
atol
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 926B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ