0ce016c64f45ba64dd00514535e52d2a | Triage

Sharing

General

Target

0ce016c64f45ba64dd00514535e52d2a
Size

42KB
MD5

0ce016c64f45ba64dd00514535e52d2a
SHA1

1033629a5d5194b44d807e0d4b14879268ec0023
SHA256

7caa10dc25ef40e8a6d2a986f6c2ee9a1561ac30b3d4031773c9a76a137ed89e
SHA512

7be771a184d141ac602d4efba1d0ea2d2ec173c2f6865f1aeb9b7a194c2e0618cf71c0141f38bbbb2124bac6caf527df536fbdcf84b0534cffeaa96a6323c608
SSDEEP

768:LEoMp31o0jI62H4uI9hODdE22etBMFAORr0z74n7goUyBere8qDG0kW1ivLQk:LE7ZI62rRhBMW7g7rU87lkW1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ce016c64f45ba64dd00514535e52d2a

Files

0ce016c64f45ba64dd00514535e52d2a
.exe windows:4 windows x86 arch:x86

c43c9ecbd9ae06b0b77d5d29606f3766

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetLastError
MultiByteToWideChar
ReadFile
GetConsoleCP
VirtualAlloc
VirtualQuery
CloseHandle
SetFilePointer
SetStdHandle
WideCharToMultiByte
DeleteFileA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE