12dfbaf24e4af989353521c9fba96fc33c21765fbe075bdb0e52049b56030b9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12dfbaf24e4af989353521c9fba96fc33c21765fbe075bdb0e52049b56030b9b
Size

707KB
MD5

65da599b9df5da7d3832bf4685fbfa54
SHA1

9578a4b32e23472a948f51ec929306ebd2d3c7bf
SHA256

12dfbaf24e4af989353521c9fba96fc33c21765fbe075bdb0e52049b56030b9b
SHA512

3bf1fe80ff99b89466a9e2f1ad7a533435aadef45b4c23dab5aa99dd1217db6d10c09847bf26f08682ae14507cbc8a37178e340f3cb4cfa16cc813cbb077f94b
SSDEEP

12288:T0pei36R0HejfTujLPtSv89oj8mqUK7fkaW59K3rJ2rAbHmnI6:gpp36seDTyLPsvuVmZkW9KbyAb/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12dfbaf24e4af989353521c9fba96fc33c21765fbe075bdb0e52049b56030b9b

Files

12dfbaf24e4af989353521c9fba96fc33c21765fbe075bdb0e52049b56030b9b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 699KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ