a3cece95eb29f338705504d0ec8db855 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3cece95eb29f338705504d0ec8db855
Size

5KB
MD5

a3cece95eb29f338705504d0ec8db855
SHA1

8ef8abbe0d2005befd434902a702e3bf38843e09
SHA256

58cc48787cc0d33fe21ae43ea2548beda4042f4eeba40b9d178aa09f69fcc6ea
SHA512

61a637fea6360ee2a206508accbf82b569e884ec56175f2ec657af0568988c938728b8804a4b9db80cb45e975b9a0f38d397507aa1313ca11a0338db720b3f11
SSDEEP

96:bCz9bZ4FAUFdHRlkXRmdRl73N4PmAIHbTtDUD:bCRbZ4Z5fkXcr7d4PmAIHXtD8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3cece95eb29f338705504d0ec8db855

Files

a3cece95eb29f338705504d0ec8db855
.exe windows:4 windows x86 arch:x86

75f9ff2ea22a2090fc6c94ed36ef1010

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
lstrcatA
CreateEventA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
WaitForSingleObject
GetModuleHandleA
GetCommandLineA
SetEvent
CreateThread
CreateProcessA
ExitThread
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
WriteFile
GetModuleHandleW
FindClose
ExitProcess
FindNextFileW

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

user32

CreateWindowExA
CharUpperA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
PeekMessageA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE