e12dcbf68781443e239b5a04187a080b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e12dcbf68781443e239b5a04187a080b
Size

50KB
MD5

e12dcbf68781443e239b5a04187a080b
SHA1

27c7fe264d370406b84176b377053f6999bda6cd
SHA256

cb36d56f64bdf3675d05863cf54bd9ba5798ba0bdeecf4f2ebc6b16b60b47436
SHA512

d8139255aecd5721e5d80f78af0e4c08c1e3cb478ece26448b0c22c6f03ac31fc64efc9104ccecb0d36905171a27e86579d3e2527285be6cf3f022d13eee3ad3
SSDEEP

1536:6vJcPZ1txJIrexHlUEtH0Ed8W9BKz2bmO:6BOpaorNBXbp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e12dcbf68781443e239b5a04187a080b

Files

e12dcbf68781443e239b5a04187a080b
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE