12fbf38d483c649986b875d834e5cead | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12fbf38d483c649986b875d834e5cead
Size

54KB
MD5

12fbf38d483c649986b875d834e5cead
SHA1

f299b791d935e4ce15828fdcaf8b0222a54822e8
SHA256

ee17df0fdbd2a6f79629147abba19abc8ab092399780cdf110346782ac94c956
SHA512

8b2e9ebf45f306cd7e201d83e409ad6276c0aace85e4fed7749477b652e08a593520be56c903c6560c09a8c54a62e5148d6549a9b3188dcceb2748ecdd3b516e
SSDEEP

1536:iMJxKaWEO4je4tcIwdiSDWFHWecO+DSIGxPkQ:imxBWHWTtcIwdiSWV5+3GxkQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12fbf38d483c649986b875d834e5cead

Files

12fbf38d483c649986b875d834e5cead
.exe windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ