ad12f38308a85c8792f2f7e1e46afc3d9f1a9017edc2cbfbb28ae0191477ab3a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad12f38308a85c8792f2f7e1e46afc3d9f1a9017edc2cbfbb28ae0191477ab3a
Size

11KB
MD5

7d4307d310ad151359b025fc5a7fca1a
SHA1

49cfcecd50fcfcd3961b9d3f8fa896212b7a9527
SHA256

ad12f38308a85c8792f2f7e1e46afc3d9f1a9017edc2cbfbb28ae0191477ab3a
SHA512

88bc8959fc84c10878bf134ff5fbee7a3c566ec9b656198b57021a48edf03c65b324026e829dcf00767bbab44b44ee4fb30c784ac5bc13326ff8f93ab01cc3c5
SSDEEP

48:ZAatawIi9PPzloBEEe6H9cKhHqTXLiuUAvd8o9hi1XT3wCNP:Z5MwDa/z9BA+AifXTgC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad12f38308a85c8792f2f7e1e46afc3d9f1a9017edc2cbfbb28ae0191477ab3a

Files

ad12f38308a85c8792f2f7e1e46afc3d9f1a9017edc2cbfbb28ae0191477ab3a
.dll windows:1 windows x86 arch:x86

cf2733f40585945e7354a1141b1a049d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
VirtualAllocEx
VirtualAlloc
VirtualFree

Exports

Exports

ClearMyTracksByProcess

Sections

AUTO
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ