12cd38dbd61ecaff1ebddf16593bf06f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12cd38dbd61ecaff1ebddf16593bf06f
Size

3KB
MD5

12cd38dbd61ecaff1ebddf16593bf06f
SHA1

02bb37e5b8e92a7697f8ea052c37b44d16388bd7
SHA256

ac09fb879077de511ad68e7cd316cd61b9ee8c0fabd1ef6edbce4313098168e0
SHA512

1420804746b9e6bd20c7882868fdcb50f219a83e44f6374fb8f8b402187986577a2d8d372f758d19f0404d7ab692519e6640011d109ede0e0efe91ccc499fe99

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12cd38dbd61ecaff1ebddf16593bf06f

Files

12cd38dbd61ecaff1ebddf16593bf06f
.dll windows:5 windows x86 arch:x86

c8db816a4faa35e06c54dabfb62cac71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessW
Module32FirstW
CreateToolhelp32Snapshot
Module32NextW
CloseHandle
GetCurrentProcessId

user32

wsprintfW

Sections

.text
Size: 512B - Virtual size: 393B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ