12dbc13a29747f57bf28222cf342a62b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12dbc13a29747f57bf28222cf342a62b
Size

19KB
MD5

12dbc13a29747f57bf28222cf342a62b
SHA1

336fbe2fd7959c82c98d386670686c5a4d091439
SHA256

8b3667bbc4ea9fa5ff01a1d24e29c1ae9f55aa8c897e45f14b03a5dd7145b8b0
SHA512

3b2928351813243f0fc9c69a321d76f23b3a95723aad46cd8eb21ed3520a8aace65ae2b6a98d3da09a20cc41cd07a81143ce17ed627b7e1ed16feb0a83f1cc5f
SSDEEP

384:Mb+kc6xFRZ/8v9VnNF7LprufxstAH/2jiZVQKOKpAuj+:DkccFRuAfZZGKpAu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12dbc13a29747f57bf28222cf342a62b

Files

12dbc13a29747f57bf28222cf342a62b
.dll windows:4 windows x86 arch:x86

80dd3caef106692eab0155f85027c656

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
CreateEventA
GetFileAttributesA
GetFileAttributesW
lstrcatA
MultiByteToWideChar
GetProcAddress
GlobalFree
ResetEvent
GetModuleHandleA
CloseHandle
lstrcpyA
lstrcpynA
RtlUnwind
SetFilePointer
lstrcmpA
CreateFileA

user32

DestroyWindow
GetWindowRect
wsprintfA
GetClientRect
SendMessageA
RegisterWindowMessageA
SetWindowLongA
MessageBoxA
GetWindowLongA
CreateWindowExA
GetDlgItem
ShowWindow
CreateWindowExW
IsWindowVisible
SetWindowTextA
EnableWindow
CallWindowProcA
SetDlgItemTextA
GetFocus

advapi32

RegQueryValueExA
RegCloseKey
RegLoadKeyW

wininet

InternetConnectA

Exports

Exports

cool
feed
plem

Sections

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ