12df0a696303f08a548681ce8263fe8a

General

Target

12df0a696303f08a548681ce8263fe8a
Size

31KB
MD5

12df0a696303f08a548681ce8263fe8a
SHA1

d52fc6c8858d41573527a64fd6d45889bc6104b5
SHA256

e4af21408eaa746b631c3cbb38ebbcb628b021540d466ab3aa224e008dfc90e6
SHA512

32ce0a32385471f9f97536f62357531ee9e79858bbf947c30c80aea33222e3af6138f6b2431d3c5d275abf3ec756eb24c10419062bcac750484f637c2ff89567
SSDEEP

384:vkGDMhTG8NS2nHw86L2nAtCVzcNU/6qLeMIt44NEWC8t7kfhp4mOKDjoQ:cGDsG8NTT6tNae44NEEkQmj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12df0a696303f08a548681ce8263fe8a

Files

12df0a696303f08a548681ce8263fe8a
.dll windows:1 windows x86 arch:x86

81b7e969a8dd5bd2b6789e9317fe2ab5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperA
MessageBoxA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetEnvironmentStringsA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ResumeThread
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile

Exports

Exports

crypt
decrypt
getblocksize
getciphername
getkeysize
setup

Sections

AUTO
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81b7e969a8dd5bd2b6789e9317fe2ab5

Headers

File Characteristics

Imports

user32

kernel32

Exports

Exports

Sections

AUTO Size: 25KB - Virtual size: 25KB

.idata Size: 1KB - Virtual size: 1KB

DGROUP Size: 1024B - Virtual size: 10KB

.edata Size: 512B - Virtual size:

.reloc Size: 2KB - Virtual size:

AUTO
Size: 25KB - Virtual size: 25KB

.idata
Size: 1KB - Virtual size: 1KB

DGROUP
Size: 1024B - Virtual size: 10KB

.edata
Size: 512B - Virtual size:

.reloc
Size: 2KB - Virtual size: