12771f5cd9d6c5e729da14ae45528330N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

12771f5cd9d6c5e729da14ae45528330N.exe
Size

70KB
MD5

12771f5cd9d6c5e729da14ae45528330
SHA1

d05dab3e7b40483904cdfd23457880753523e8d8
SHA256

a5638bf82712fc09df9a0789a4cdec1228fdb24a014c68685c07c1ffdc510aa6
SHA512

8e2284ec4314231ab3ea2c6ef06b4d1a9ac95eede627b701440b249ac093de57b9bee10682b308445e94e8ca88797d47374e235952d1d9ceacff38047fa221bf
SSDEEP

768:IRByfZfyImgf+Is27w5ao+rDz9RZ9FoJAii1XChYl:xZ0AW5EXChYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12771f5cd9d6c5e729da14ae45528330N.exe

Files

12771f5cd9d6c5e729da14ae45528330N.exe
.dll windows:4 windows x86 arch:x86

cd54f7aab61438087123a147aa33e67f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

hidparse.sys

HidP_FreeCollectionDescription
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetCollectionDescription
HidP_GetUsages
HidP_GetUsageValue
HidP_GetValueCaps

kernel32

GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrW
MulDiv

ntdll

RtlDeleteCriticalSection
RtlEnterCriticalSection
RtlInitializeCriticalSection
RtlLeaveCriticalSection
_vsnprintf

ntoskrnl.exe

ObfReferenceObject
ExAllocatePool
ExFreePool
IoAttachDeviceToDeviceStack
IoBuildDeviceIoControlRequest
IoBuildSynchronousFsdRequest
IoCallDriver
IoCompleteRequest
IoCreateDevice
IoDeleteDevice
IoDetachDevice
IoInvalidateDeviceRelations
KeInitializeEvent
KeSetEvent
KeWaitForSingleObject
RtlInitUnicodeString
wcscat
wcscpy
wcslen
wcsrchr
wcsstr

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
free
fwrite
getenv
malloc
memcmp
memmove
strchr
strcmp
strcspn
strlen

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 160B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 55B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd54f7aab61438087123a147aa33e67f

Headers

DLL Characteristics

File Characteristics

Imports

hidparse.sys

kernel32

ntdll

ntoskrnl.exe

ucrtbase

Sections

.text Size: 16KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 56B

.rdata Size: 4KB - Virtual size: 2KB

.bss Size: - Virtual size: 160B

.edata Size: 4KB - Virtual size: 55B

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 584B

.reloc Size: 4KB - Virtual size: 784B

.text
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 56B

.rdata
Size: 4KB - Virtual size: 2KB

.bss
Size: - Virtual size: 160B

.edata
Size: 4KB - Virtual size: 55B

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 584B

.reloc
Size: 4KB - Virtual size: 784B