cme[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cme.exe
Size

8KB
MD5

b4ec23a78feb67ee55cb02fed9198d24
SHA1

2ae487a4a59a79e3fa76c50d8e89728c940dc09d
SHA256

9b6817eb1b4d5bb15d4cc27b6ce107cea07dc1ab2c9f8220219efe6f76e3e6f1
SHA512

86803bf05ef21316aaf10d527aac945062e393f5eb63dd8c1562e2e321d0f0407cd31d4d1ec6c2a67bd5e9a926b9a25d4a250a9c1229571c123330ea18a9d52e
SSDEEP

192:6CknwHVqJHJAyZJg8D0KThxA+rAQE+tnJiON:snwHgJpJgLa0Mp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cme.exe

Files

cme.exe
.exe windows x86

167e3964d4d9024deb2373edaa2fafc7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetCommandLineA
WriteConsoleA

Sections

.text
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ