12[.]exe | Triage

Sharing

General

Target

12.exe
Size

538KB
MD5

227cb9e343ab7e59cc94e59390ddb86e
SHA1

e343bec355502aa976aa4af68dbcf1375634c023
SHA256

03a286d22e67960007008b0a69e0492310f06434e640b3ede36ea09b78e54a7a
SHA512

3475a05932e235e23c54bd8be49fd856cbbab474f6f925d0c6ce6f0450cd073c4febd3705d52b596b35dab0c881e688a7b56f04f2a62c6315d7ad660462e1169
SSDEEP

6144:YYqdc0NkzDVx/j6TIlA41V1cN3p0NIb88WsNMPaKFP3b2V122J0sL:Y9J837zPcN3CNIb88WsNMP5F1k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12.exe

Files

12.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ