Hceea[.]exe | Triage

Sharing

General

Target

Hceea.exe
Size

590KB
MD5

54c9a4eb41248f7280822eee5c61e65a
SHA1

8fe0fa66b9d3aba79de813f3121f9bceac0c3f4c
SHA256

13993a109f4064a70ae87d660099352109c6115065444c46e5cb4854496ce6da
SHA512

3d84edb1b4d6398b69c4c9f8019c0d5e71c538ee4a75bec402047f57c8e9dd17f1762f5cb64bd5595427d2df5f50b2a04f7cacfa5f6fb3b85d4d5c45867fe662
SSDEEP

12288:YiQIM/QIpht01nYDKOfB2egt0t4L02csbvYCz2S6:Y/LNuwWiCnX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hceea.exe

Files

Hceea.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 588KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ