12c42f775127062bc6f68bd4a460cc92119c85cff3e23b142fd572c392a7f7b0N

General

Target

12c42f775127062bc6f68bd4a460cc92119c85cff3e23b142fd572c392a7f7b0N
Size

436KB
MD5

0ffbac5555049698e7a8368115196de0
SHA1

bd8c74c02b517e752fd735341521f6220205045e
SHA256

12c42f775127062bc6f68bd4a460cc92119c85cff3e23b142fd572c392a7f7b0
SHA512

9269daf2fa4cc2cb813d3f3a1159b1b387561ebea5e64a2edbef48d1fb583f57b1928e01d5dbf33ae3aec61985d120e6f165e7545208c1830da665cf9ad8f792
SSDEEP

12288:rUa11sYvP04f+mhl6iWLGLloVQ67QcDW7x:rP1C8PXjlRWOkLDe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12c42f775127062bc6f68bd4a460cc92119c85cff3e23b142fd572c392a7f7b0N

Files

12c42f775127062bc6f68bd4a460cc92119c85cff3e23b142fd572c392a7f7b0N
.exe windows:4 windows x86 arch:x86

5a0d1d177bb7ba991dd7483e7ad16c90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
VirtualFree
GetLocalTime
OpenEventA
VirtualAlloc
GetProcAddress
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
TerminateProcess
GetSystemDirectoryA
LoadLibraryExA
TerminateThread
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
VirtualQuery

user32

SetActiveWindow
SetWindowTextA
LoadBitmapA

gdi32

SelectObject

avifil32

AVIClearClipboard

Exports

Exports

?Start@@YAKK@Z

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 863KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a0d1d177bb7ba991dd7483e7ad16c90

Headers

File Characteristics

Imports

kernel32

user32

gdi32

avifil32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 21KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 404KB - Virtual size: 863KB

.text
Size: 24KB - Virtual size: 21KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 404KB - Virtual size: 863KB