12f3408fcb1ca4bf9b2ea5725fd6a5b0N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

12f3408fcb1ca4bf9b2ea5725fd6a5b0N.exe
Size

696KB
MD5

12f3408fcb1ca4bf9b2ea5725fd6a5b0
SHA1

be603614e67aff66c6561f6e4b3ce661d3347b95
SHA256

5a5b5f8160f2afea9f1fd99ab7c86ad01763ebdd9e8d18ce76ee000acdd750d0
SHA512

4cf82bf84067f966b2e79a4064f1f6e807c31860f9eccf2ac9e7015a456fa0af5293f3e932d93d06094a7737cd3812f69707768fd519d3a55b277d85d66d8f16
SSDEEP

12288:SEJfM0TNY1cEOCTtL/cWlhRtr0nyUf2Ci1c8o45YdDKn1KHZp:nFXTW1PV/cONr0nyUfKdj5YhKn1KH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f3408fcb1ca4bf9b2ea5725fd6a5b0N.exe

Files

12f3408fcb1ca4bf9b2ea5725fd6a5b0N.exe
.dll windows:6 windows x64 arch:x64

b543b4591069400113cc6e5c3b32304b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiDestroyDeviceInfoList

version

GetFileVersionInfoSizeW

kernel32

CompareStringW
GetModuleHandleA

user32

DestroyIcon
TranslateMessage

advapi32

CryptReleaseContext
RegOpenKeyExA

shell32

SHBrowseForFolderW
ShellAboutW

ole32

StringFromGUID2

shlwapi

StrCmpLogicalW

Exports

Exports

CompareSystemIds
CompareSystemIdsEx
CompareSystemIdsExW
CompareSystemIdsW
ConvertLicenseLongToBin
ConvertLicenseLongToStr
GenerateAppCertificate
GenerateLicenseLong
GenerateLicenseLongW
GenerateLicenseShort
GenerateLicenseShortW
GenerateServerConfiguration
GenerateSignature
GenerateSignatureFromFile
GenerateSignatureFromFileW
GenerateSignatureW
GetLicenseHash
VerifyLicenseLong
VerifyLicenseLongW
VerifyLicenseShort
VerifyLicenseShortW
VerifySignature
VerifySignatureFromFile
VerifySignatureFromFileW
VerifySignatureW

Sections

.pdata
Size: - Virtual size: 1003KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b543b4591069400113cc6e5c3b32304b

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

version

kernel32

user32

advapi32

shell32

ole32

shlwapi

Exports

Exports

Sections

.pdata Size: - Virtual size: 1003KB

.rdata Size: - Virtual size: 185KB

.rdata Size: - Virtual size: 41KB

.rsrc Size: 1KB - Virtual size: 1KB

.rsrc Size: 99KB - Virtual size: 98KB

.pdata
Size: - Virtual size: 1003KB

.rdata
Size: - Virtual size: 185KB

.rdata
Size: - Virtual size: 41KB

.rsrc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 99KB - Virtual size: 98KB