12db249b6df55f2bd3cd51e545c45c4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12db249b6df55f2bd3cd51e545c45c4a
Size

2.9MB
MD5

12db249b6df55f2bd3cd51e545c45c4a
SHA1

7a0445b17a5d2f969cbf962c1940f9d2b3d898ec
SHA256

742f52b55dbda37b3d6b8b5fcfc305259c976a9b6afb235d23e080367b6700c3
SHA512

416c6567fc84a548b80f2bd766c98216076adababa7b7dc5b8e195250eb15d34c2c7dd2587b961c2b5235a175bc521aa52509640dfc8c9dfe59926bb0430bbc3
SSDEEP

49152:2fzpOUyMhZ2OOdBufmxv9vv2NOYO1NZtNUuclSyspkOezXV4ZKZhiR7dm6IBVfab:YpFh0OOdBhvRR7ZDUuHHpe4giFqjfR8f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12db249b6df55f2bd3cd51e545c45c4a

Files

12db249b6df55f2bd3cd51e545c45c4a
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ