12d7539a489aa2d85c6c93137e99de83

Sharing

Copy URL Twitter E-mail

General

Target

12d7539a489aa2d85c6c93137e99de83
Size

36KB
MD5

12d7539a489aa2d85c6c93137e99de83
SHA1

f61f2387549b96225aa0be68ed994c33a6e01715
SHA256

e7cda9665d4564f69c635ad12229416129de436786f5336dcc93368ba0e8a06e
SHA512

33b70618373b19b6c6a6241267819e8ee2d4bcf26876d438bc2d418458633b5f2cc2d2d25eb47b02c8f15ccfe38508b70f53147d75b8bcd9c55bc0811c6784be
SSDEEP

384:bszG7Hp7qB04KwB2Tw4ubutOq4B7u88o:RXZXw4ubutn4o88o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12d7539a489aa2d85c6c93137e99de83

Files

12d7539a489aa2d85c6c93137e99de83
.dll windows:4 windows x86 arch:x86

82639466356a694a4d1d8c9f4ceb3549

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
LocalFree
LocalAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
WriteFile

user32

GetSubMenu
CreatePopupMenu
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
GetMenuItemCount
DestroyMenu
LoadMenuA
LoadStringA
wsprintfA

mmfs2

ord138
ord264
ord585
ord520
ord286
ord679
ord611
ord646
ord359
ord136
ord616
ord272
ord274
ord753
ord554
ord571
ord174
ord137
ord713
ord739
ord445
ord372
ord173
ord356
ord519
ord584
ord645
ord363
ord245
ord423
ord241
ord172
ord487
ord34
ord757
ord384
ord148

msvcrt

free
_stricmp
_adjust_fdiv
_initterm
malloc
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
calloc
_strdup

Exports

Exports

ContinueRunObject
CreateFromFile
CreateObject
CreateRunObject
DestroyRunObject
DisplayRunObject
EditObject
EditorDisplay
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDebugItem
GetDebugTree
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionString
GetExpressionTitle
GetFilters
GetHelpFileName
GetInfos
GetObjInfos
GetObjectRect
GetPropCheck
GetPropValue
GetProperties
GetRunObjectCollisionMask
GetRunObjectDataSize
GetRunObjectInfos
HandleRunObject
IsPropEnabled
LoadRunObject
MakeIconEx
PauseRunObject
ReInitRunObject
SaveRunObject
SetEditSize
SetPropCheck
SetPropValue
UpdateEditStructure
UpdateFileNames
UsesFile

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82639466356a694a4d1d8c9f4ceb3549

Headers

File Characteristics

Imports

kernel32

user32

mmfs2

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 588B

.rsrc Size: 12KB - Virtual size: 9KB

.reloc Size: 4KB - Virtual size: 670B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 588B

.rsrc
Size: 12KB - Virtual size: 9KB

.reloc
Size: 4KB - Virtual size: 670B