c012ca05435eb76e2870e327b9d54702 | Triage

Sharing

General

Target

c012ca05435eb76e2870e327b9d54702
Size

394KB
MD5

c012ca05435eb76e2870e327b9d54702
SHA1

6c30a49aa87c99c62225fe0ae6567f21fe261a42
SHA256

6161c94471b58e4d5346b8f5fc2b0d984c50d2d16cd7a428361321e1e0d2e34d
SHA512

e88fedf592ec0b8b7656d0e7d489b7d64fdd278ad406fb5966a95de9890cd2698db408e14ddf2cab5a9a5430a91aa6c88c85cb9bd92a3d77ad94f0b6473326f5
SSDEEP

6144:v44yTfdxQtF5iy14sZmE23IozgFIJHF0wITJJsm7C9f0tXY6QRF4e/pta:v44o/QP5NikmE2YixpFqTJ6QC5Rfta

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c012ca05435eb76e2870e327b9d54702

Files

c012ca05435eb76e2870e327b9d54702
.exe windows:4 windows x86 arch:x86

524e45db88dc6439f37b4388f1d8938c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetModuleHandleA
GetProcAddress
VirtualAlloc
TlsFree
GetCurrentThread
Sleep
DeleteTimerQueue
CreateSemaphoreA
GetModuleFileNameA

user32

IsWindowUnicode
PostMessageA

ole32

CoInitialize
CoUninitialize

netapi32

NetDfsManagerInitialize

psapi

GetModuleBaseNameA

avifil32

AVISaveOptionsFree
AVIPutFileOnClipboard

msvfw32

DrawDibEnd

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rss
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvda
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE