ce04875198cef6bd8f9e7453d6b06462 | Triage

Sharing

General

Target

ce04875198cef6bd8f9e7453d6b06462
Size

194KB
MD5

ce04875198cef6bd8f9e7453d6b06462
SHA1

6d9fa99bedad7405273b52aae133ae60f04420ba
SHA256

575b501bfddf2e0ddae1afc278a55318ff7e24039d2c9398a200ffd731bae4af
SHA512

1809ec61fd15662d0ebdb123d6efc50cc262f7f7132b545ee735eb063fb1d066d4c6b58163793d0b89dd61b33d11f64344d6072eb51acd1cdb359ab36a5dc125
SSDEEP

3072:gRz9A2PCaq7EyM0ODaId2nDCMAnBSufSG+ZUdQlNIEkPllhXXLJbSj38I3K/Hm:gR5A1T1J17neH8aWKdkNIEA3hXbhTHm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce04875198cef6bd8f9e7453d6b06462

Files

ce04875198cef6bd8f9e7453d6b06462
.exe windows:4 windows x86 arch:x86

2def80e33554c9fa7ba605b5986c9ebe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

shell32

SHAppBarMessage
StrRChrIA
StrStrIA

Sections

.text
Size: 36KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 730KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ