cce3ad13613b028113a3b281b011e4af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cce3ad13613b028113a3b281b011e4af
Size

42KB
MD5

cce3ad13613b028113a3b281b011e4af
SHA1

041fc178f568db2ef4a9b1de6a13e07af721067e
SHA256

42568d171d8e1b805d080f045dee974aee77bc17f656002e90fa14876362b801
SHA512

2c5d9b0cf68382dbd7ba81047e91c92aed18f886e18835cd3524fb77375e6592c930ab99470a166603e56d3fda7c0681c1db858bb768186d8c752df16dad52dc
SSDEEP

768:qQ3nE61axlALt6fHP2Rx/5/evtSndwD7mSav5NNf3uq2ihyi2:qQ3b1avA56/eRxgvtS2D7mzvvNWq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cce3ad13613b028113a3b281b011e4af

Files

cce3ad13613b028113a3b281b011e4af
.exe windows:5 windows x86 arch:x86

164cfcac541a7ac8708f5df850d78093

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
lstrcmpA
lstrlenA
lstrcpynA
GetTickCount
WriteFile
GetCommandLineA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
FindAtomA
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
CloseHandle
GetVersion
GetTempPathA
GetSystemTime
lstrcpyA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
RtlUnwind
IsDebuggerPresent

user32

GetWindowRect
ClientToScreen
wsprintfA
InflateRect
GetCursorPos
GetCaretPos
EqualRect
IsWindowVisible
GetFocus

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE