2ce763306955c495b26e2ee9d09d6544 | Triage

Sharing

General

Target

2ce763306955c495b26e2ee9d09d6544
Size

24KB
MD5

2ce763306955c495b26e2ee9d09d6544
SHA1

7abc9c46c78840a13bc919c90621698a2244df97
SHA256

54408da8332c02fa095738022e3cd5c13660bede8b68180df6bbacdf022f8491
SHA512

a7df1e63b952119de5ff494ab45a6ea7583286c78c707cef393cc4015057abb638c5697615a94e910ae2096e82d358c08f0ba3093edf8d4b65cd7f71d1875c40
SSDEEP

192:6KQuAohfg02urKN92G9ZWmZWNA2tP1oyebuEKQ9Z1:bhO02OU9D2AE1IbuE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ce763306955c495b26e2ee9d09d6544

Files

2ce763306955c495b26e2ee9d09d6544
.exe windows:4 windows x86 arch:x86

69329e79c62fcc3b1c08d244c9d3f531

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleFileNameA
CloseHandle
CreateProcessA
Sleep
FreeLibrary
MoveFileA
DeleteFileA
WriteFile
CreateFileA
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

msvcrt

ldiv
srand
time
__CxxFrameHandler
??3@YAXPAX@Z
sprintf
_except_handler3
strstr
atol
_access
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
rand
??2@YAPAXI@Z
_itoa

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ