3ceeac984cdb16e85dce0ee46fe14dfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ceeac984cdb16e85dce0ee46fe14dfb
Size

271KB
MD5

3ceeac984cdb16e85dce0ee46fe14dfb
SHA1

210c11696de60a66987f9df1b9ecc4971f303e82
SHA256

c6ef4b1ae62a44ddf949150b7eee345d6b3f03c9045e0e5264bcceec4cb1f210
SHA512

24edd17d44b5975f826ac034eed3cb128ec0e32038a4a1d8f97da40a0d025988ac8212a90dee40247b1b3991394c4705632a85be216ded33370899233f182e51
SSDEEP

6144:PxZQ6r2DlXRH7b2p2lJhrdVPP7Y8LaCmxEzkN4OGohSnFUxC:LQ60lXJ7bHdVPTYLCgkedAFUxC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ceeac984cdb16e85dce0ee46fe14dfb

Files

3ceeac984cdb16e85dce0ee46fe14dfb
.dll .ps1 windows:4 windows x86 arch:x86 polyglot

617688cc9995aeb1a3c2c9183e2c9419

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringA
ExitProcess
GetDateFormatA
GetPrivateProfileStringA
InitializeCriticalSection
ReadFile
SetEndOfFile
Sleep
lstrcpyA
lstrlenA

Sections

.text
Size: 24KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 242KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ