00ced7fe8daf1d47bf5e29895c6ad358 | Triage

Sharing

General

Target

00ced7fe8daf1d47bf5e29895c6ad358
Size

43KB
MD5

00ced7fe8daf1d47bf5e29895c6ad358
SHA1

5350f4f836d0e318c760ebc1afa3ae57060fb146
SHA256

3ad7170f0524a6a4ffa212dcf00505d6616c6bab5ab83531539407eb3c36f2ce
SHA512

7769528065388b9adcdcb32039c37185df8028ae5d172665b82d55f4729fb6856e1eeab6cbba96de46042885887aa62aa6cf548e80452fac62deda01cff3cfdd
SSDEEP

768:x/fSANrdG52sb+yf9v5ry/d6tiraFw1OTSo6Z4MQXr/UC:NfZKb+oy/kdXMZWXr/UC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00ced7fe8daf1d47bf5e29895c6ad358

Files

00ced7fe8daf1d47bf5e29895c6ad358
.exe windows:5 windows x86 arch:x86

be963b0a42606df520d3252490308297

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GetSystemTime
HeapFree
ExpandEnvironmentStringsW
GetModuleHandleA
UnmapViewOfFile
SetFileAttributesW
HeapAlloc
FindFirstFileW
SetThreadPriority
FlushFileBuffers
GetTimeZoneInformation
SetLastError
GetUserDefaultUILanguage
SetFileTime
GetTempPathW
OpenProcess
lstrcmpiA
SetEndOfFile
CreateEventW
GetSystemTimeAsFileTime
DisconnectNamedPipe
CloseHandle
GetCommandLineA
EnterCriticalSection
MoveFileExW
lstrlenA
GetDriveTypeW
SetEvent
lstrcpynW
GetModuleFileNameA

user32

GetWindowTextW
ExitWindowsEx
GetWindowLongW

Sections

.wvat
Size: 35KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tuvwv
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fwzyb
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ