80012fb0d583012f087a5f5b7cc9af50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80012fb0d583012f087a5f5b7cc9af50
Size

359KB
MD5

80012fb0d583012f087a5f5b7cc9af50
SHA1

6bb778d4a24bfdb4ac23ae7382cf7fcb34d6aa09
SHA256

ba80b121e1a923c02f5d2d8da911fbc5b9c086bcf7cb1a31d6e60052276d6a17
SHA512

4fececb074a77a53e57da70bcde2f8248002365ebfa5f60bd2575a4a2ae5a4b776bd03db13b61f77d0e4559734c31c9730192a82358f62a8e0f19f395f4899cd
SSDEEP

6144:vLLPlr5IoEuvpsGY+d7IafH+bZbdQ1ihIGsYR8Ima9gE4B5r7L0/c:jLtfv6V+hVfelhtnsYR8Ima9gE4BGc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80012fb0d583012f087a5f5b7cc9af50

Files

80012fb0d583012f087a5f5b7cc9af50
.exe windows:4 windows x86 arch:x86

1a95e125fc87991596298e6637676113

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
FindFirstFileW
CopyFileW
EnumCalendarInfoExA
FindNextFileW
SetFileAttributesW
MoveFileW
FindClose
SetLastError
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExW
FormatMessageW
GetTickCount
CreateEventW
CreateThread
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
ResetEvent
SetEvent
GetFileAttributesExW
ReleaseMutex
WaitForMultipleObjects
CreateMutexW
CloseHandle
WaitForSingleObject
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
LocalAlloc
LocalFree
GetLastError
InterlockedDecrement
InterlockedIncrement
InterlockedExchange

oleaut32

VARIANT_UserFree
SafeArrayCreateEx
VarDateFromI4
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen

msvfw32

ICInfo

Sections

.text
Size: 244KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE