a12574f2d87cda760478635ea7c40f2c | Triage

Sharing

General

Target

a12574f2d87cda760478635ea7c40f2c
Size

414KB
MD5

a12574f2d87cda760478635ea7c40f2c
SHA1

5bd5c4dc729a209c3f23019d941780cbd96c2f5d
SHA256

3416ea741c24a7e12d0a37e124a8acf016395e3fd67f1a02a34747695f96b22f
SHA512

ed5ba03a6fbb3666bf8f39b918ec84ccbdd4a4d2cc1676cb2eaa9a324f84b6dd0d2b26cd5154bee4adb633f8d6fd06d4e5bf3081f502d28a160641a8e3db4985
SSDEEP

12288:qngo1xkNkVhkkuK2Qtm98oQ8wUDXVzwl:ro1xCkPz2EG8opHlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a12574f2d87cda760478635ea7c40f2c

Files

a12574f2d87cda760478635ea7c40f2c
.exe windows:4 windows x86 arch:x86

ef381c81f363c21aabbe21e228dd8c6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
HeapCreate
ExitThread
LoadLibraryA
SetEvent
LoadLibraryW
GetCommandLineW
LocalFree
ReleaseMutex
GetLocalTime
GetDriveTypeA
ReleaseMutex
CloseHandle
FindAtomA
GetFileAttributesW
lstrcpynA
GetProcessHeap
CreateFileA
GetDiskFreeSpaceW
GetComputerNameW

user32

GetComboBoxInfo
GetClipCursor
DispatchMessageA
GetKeyState
GetDlgItem
GetClassInfoA
DestroyCaret
CallWindowProcA
CreateWindowExA
FillRect
DrawStateA
SetFocus
CloseWindow

snmpapi

SnmpTfxQuery
SnmpUtilMemFree
SnmpTfxOpen
SnmpUtilMemAlloc
SnmpTfxClose

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ