12e077bd58e5003edcbd47bd82d869f0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

12e077bd58e5003edcbd47bd82d869f0.exe
Size

168KB
MD5

12e077bd58e5003edcbd47bd82d869f0
SHA1

6e0992142426096bcd8f2803674fb307ccdac3da
SHA256

49e1fd1710f27f613a5bcc1950cbcdd2a4ca3e2d6c814e7f8bc45472dc391165
SHA512

8d4cedbadcf0f1f518ea63e42acfc959d7f844cb855ccadffe0e53e67ba2cb1449d7c11f27dd66c5a0fc7927fdae8120cf79e31c92ac3b227247641db22e0ffb
SSDEEP

3072:Zrtk5IiAbuixpe1dnY9ZWr0lzDiq5JerMbu+KgUj2zd1VOCmPDVkFnv2AjYPSz7m:Zr6IDj08zDL5uMb2KkPBkFneatf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12e077bd58e5003edcbd47bd82d869f0.exe

Files

12e077bd58e5003edcbd47bd82d869f0.exe
.exe windows:4 windows x86 arch:x86

c95ff3b0acdd1466e3975300cd2b3f12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
CopySid
GetLengthSid
IsValidSid
LookupAccountNameA
GetUserNameA
StartServiceCtrlDispatcherA
ChangeServiceConfig2A
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegSetValueExA
RegCreateKeyA
DeleteService
QueryServiceStatus
ControlService
OpenServiceA
RegDeleteValueA
StartServiceA
RegisterServiceCtrlHandlerExA
SetServiceStatus
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW

kernel32

GetModuleHandleA
SetConsoleCtrlHandler
LocalFree
FormatMessageA
GlobalFree
GlobalAlloc
GetStdHandle
AllocConsole
CallNamedPipeA
CloseHandle
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
SetEvent
CreateThread
CreateEventA
DisconnectNamedPipe
FlushFileBuffers
WriteFile
ReadFile
ConnectNamedPipe
CreateNamedPipeA
ExitThread
MultiByteToWideChar
LoadLibraryA
FreeLibrary
CreateFileA
CreateFileW
DeviceIoControl
SetLastError
Sleep
GetModuleFileNameA
GetVersionExA
GetLastError
OutputDebugStringA
GetProcAddress
LocalAlloc

user32

DestroyWindow
wsprintfA
RegisterClassA
RegisterDeviceNotificationA
UnregisterDeviceNotification
DefWindowProcA
PostMessageA
CreateWindowExA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
SysAllocStringLen

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
CM_Locate_DevNodeA
CM_Reenumerate_DevNode
SetupDiGetClassDevsExA
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey

dsound

ord1

msvcrt

wcslen
_exit
?terminate@@YAXXZ
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
free
malloc
calloc
_mbscmp
isalnum
isspace
sprintf
isalpha
_mbsnbcpy
_ftol
_CIasin
strtod
_CIpow
_CIacos
_mbslwr
_mbsicmp
??3@YAXPAX@Z
__CxxFrameHandler
_purecall
??2@YAPAXI@Z
printf
_mbslen
_fdopen
_open_osfhandle
setvbuf
_iob
wcsncmp
_except_handler3
sscanf
_strdup
memset
wcscpy
_wcsicmp
wcscat
strcpy
strcat
_mbsnbicmp
??1type_info@@UAE@XZ
_XcptFilter

winmm

mixerGetNumDevs
mixerMessage

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vrdata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c95ff3b0acdd1466e3975300cd2b3f12

Headers

File Characteristics

Imports

advapi32

kernel32

user32

ole32

oleaut32

setupapi

dsound

msvcrt

winmm

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 1KB

.vrdata Size: 76KB - Virtual size: 76KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 1KB

.vrdata
Size: 76KB - Virtual size: 76KB