1cea4f04b62465b0bcc3a7c8856bffc0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cea4f04b62465b0bcc3a7c8856bffc0
Size

46KB
MD5

1cea4f04b62465b0bcc3a7c8856bffc0
SHA1

1409ba9075402b00c2fa4618e45c08183a9f37ba
SHA256

c18d379c7c9ee0d2b00fba5f2f1ac2f79c97ab5b95f4fb0e6bcc2f36f5105547
SHA512

5950a7a65d8cf1d90c0cebc6d37ab5a12c7853d577e942ad9c41c45062caa0b38a7ab5aaa5a998f64fceb08dd7190b936d2c675428c10963d5161472d84095d5
SSDEEP

768:rgWsyqA+CKtuAifI/JJ/US75cnmnPiVY8vL6bZ5ZMP7Ybw2OaMyemE76tW6bIE2q:nsyqLCyd/U05smnKVY8v+brigkyePVEf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cea4f04b62465b0bcc3a7c8856bffc0

Files

1cea4f04b62465b0bcc3a7c8856bffc0
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 37KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.petite
Size: 7KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE