c12f9cbe3f5450c8b10162ef77afec70N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c12f9cbe3f5450c8b10162ef77afec70N.exe
Size

156KB
MD5

c12f9cbe3f5450c8b10162ef77afec70
SHA1

f860b3e912c68b0271cd2a7af971eb855d6bba24
SHA256

b24f4c4804ff9f5eaeaa8d32e7f19c511ae9e704b094612562c7c1625338ade7
SHA512

a297dc5404c14e23be08fe81e227a7000bf3fe0d3090b80d017208fac84222c415de0b27b3dacdfc3467b67dce161daf3b97f64bc80a539a13d06da4f6004648
SSDEEP

3072:6Cj3pRbSQ5Q4EeaYCmocMihpPxpDICXBJh1c9IZd:7JtMihpPXFhXZd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c12f9cbe3f5450c8b10162ef77afec70N.exe

Files

c12f9cbe3f5450c8b10162ef77afec70N.exe
.dll windows:6 windows x86 arch:x86

c042dc5285d88b7e542fff1fc34e4ef4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

odfox32.pdb

Imports

msvcrt

_except_handler4_common
_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
MultiByteToWideChar
InterlockedExchange

odbcjt32

ord514

Exports

Exports

ConfigDSNW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ