04ce697bd2d74a29d724e59b08359606 | Triage

Sharing

General

Target

04ce697bd2d74a29d724e59b08359606
Size

154KB
MD5

04ce697bd2d74a29d724e59b08359606
SHA1

9875e1229a860ec166bfefa46be2502588a97bb3
SHA256

6d244b4b672ec7aa4614c2ad51b798e164c81ad38be191f6c0800a9dc2cc9d8d
SHA512

d0e09d263ff2e3a88c837cb40ee4f1a2d8cecb7dbc543ee7c8f88d5c4575a632fed1ebe35302aa2bf82cedd8af159d8bb35f5f58b76b3a1fe116772c23507238
SSDEEP

3072:Budy3PuJjD7aHObMQ9Y3x0nIPHSi+pzX8/zHZFzjrGRrUGq514/LQ:BkkPSD7aHOAH0IPHzU+7rkgGEC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04ce697bd2d74a29d724e59b08359606

Files

04ce697bd2d74a29d724e59b08359606
.exe windows:4 windows x86 arch:x86

0e5f7cbf59525de18e40377f47395c58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

ReleaseCapture
GetCapture
ValidateRect
SetCapture
ExcludeUpdateRgn
InvalidateRgn
ValidateRgn
GetWindowInfo
GetUpdateRgn

kernel32

CompareStringA
SetCurrentDirectoryW
GetVDMCurrentDirectories
FindClose
LocalFileTimeToFileTime
SetEnvironmentVariableW
SetThreadPriorityBoost
SystemTimeToFileTime
GetStringTypeW
SetErrorMode
LoadResource
EnumResourceNamesW
GetShortPathNameW
HeapCreate
FindFirstFileW
RegisterWaitForSingleObject
GetLocalTime
FreeLibrary
FileTimeToSystemTime
FindNextFileW
FileTimeToLocalFileTime
FindResourceW
SearchPathW

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ