c13fcdeee5836c82ecfcbdf9d24b14cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c13fcdeee5836c82ecfcbdf9d24b14cc
Size

147KB
MD5

c13fcdeee5836c82ecfcbdf9d24b14cc
SHA1

56a297aeeea843a61ccba9a19bc9ffa3f624800c
SHA256

c013bb4b631bfd5bee54df9fd45924a8f3835981f9cff07985bb9763c3ac5241
SHA512

a7c9b8a49e67d6894a42e631ccbcf1b25e62669b2d6599653209d3b80cbf9d8878f17da522b2bd05c5ba17d17e54dc3648de2c755318d698cd8acd4da1e44aec
SSDEEP

3072:ehfvlppYLrIi145148sk806be+RegJSKS8L8:eXGEWkAbe+d47F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c13fcdeee5836c82ecfcbdf9d24b14cc

Files

c13fcdeee5836c82ecfcbdf9d24b14cc
.exe windows:5 windows x86 arch:x86

bd6cac0b4667ad2919d4a5a00d0a97f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFiber
GetProcAddress
SetCurrentDirectoryA
CancelTimerQueueTimer
CreateFiberEx
LockFile
LoadLibraryA

user32

RedrawWindow
GetMenuState
CreateIcon

gdi32

BitBlt
CreateFontW

advapi32

IsWellKnownSid
GetServiceDisplayNameA
LsaFreeMemory

Exports

Exports

jbwsdtfuaths
ovvxcyls
pccfdnla

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ