12e3e2e44851d6246dbf6c76772f8151 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12e3e2e44851d6246dbf6c76772f8151
Size

10KB
MD5

12e3e2e44851d6246dbf6c76772f8151
SHA1

62d0152374e8e4f21ede887a50dd9d661df2ac55
SHA256

3534cc5dd595568f54237d9691944c44044b9c8ccc176062598173a776756b9a
SHA512

3461fa183fe46bd6d159a3268e8041a26194cd4e8056536df88fc473cb299d9198a0ca0cc998d113fa934a8248c793e75deaee5666b99dcfbb0572f22cfcc59f
SSDEEP

192:aV35fmn28SD/IwzxYE+R4eaH1/HSqZWHG:m35U28II6xYv4VlHrZWHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12e3e2e44851d6246dbf6c76772f8151

Files

12e3e2e44851d6246dbf6c76772f8151
.dll windows:1 windows x86 arch:x86

e26ee8c5b20bc1f8c7426c5f46f27bf1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
ExitThread
GetCommandLineW
GetLastError
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
MoveFileExA
Sleep
VirtualAlloc

Exports

Exports

rand

Sections

.Proxy
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE