e12549b2616e6f30f0bf0e96c42dd149 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e12549b2616e6f30f0bf0e96c42dd149
Size

1.2MB
MD5

e12549b2616e6f30f0bf0e96c42dd149
SHA1

07e673e7d11359c7fda9ac538676910db9bd5869
SHA256

3025d7c238601c4c79c5764c13f3c3af22d45ae1b14756adb26ca2d780a2d74f
SHA512

19e997c04c9a492a5d651433ab0d762c0474e3b558dbfa29655aad5b992782070c7c651950a5567128526c6e9d429588dc09df1e4375c70a56e36d6ef828fe7a
SSDEEP

24576:Go4iCNC4KceyzDJdPkJSwzarqB67+6GUGLHzSrcN9nk75Jub:GozCNzKceyXJduzbB6KBqwNNEK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e12549b2616e6f30f0bf0e96c42dd149

Files

e12549b2616e6f30f0bf0e96c42dd149
.exe windows:4 windows x86 arch:x86

d705eeaf347305d32a74b66f8a309012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??2@YAPAXI@Z
_except_handler3
??3@YAXPAX@Z
memcpy

user32

LoadMenuA

kernel32

GetModuleHandleA
LoadLibraryA
VirtualAlloc
GetProcAddress
VirtualFree
WaitForSingleObject
GetStartupInfoA
CreateThread

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ