ce14ae14aca5c20c7c2120944d709c4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce14ae14aca5c20c7c2120944d709c4b
Size

252KB
MD5

ce14ae14aca5c20c7c2120944d709c4b
SHA1

386fc157b9782d7a7da94575558508f6793dfb53
SHA256

856166b6445415c6dfa476171b1295b91853a68ed81cedc690e836aba28633d0
SHA512

3098017f1e40df98f8a46ddb48b06550ff83adac2e9ddb43d996446f478ff7841fd268780ac5f2eee1e1407813c9d58280cdc396b03c3e54cc659230fc3e30c9
SSDEEP

6144:9hEBeRyGESBHIn4twz9I0Ys/RJV/4pPr3VPIYr++YEAAAQcp5hA:9KM9jBHI46zDJV/0zVPNOQc/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce14ae14aca5c20c7c2120944d709c4b

Files

ce14ae14aca5c20c7c2120944d709c4b
.exe windows:4 windows x86 arch:x86

96d3a0bf941d20473b10c33aff3ab040

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AreFileApisANSI
RtlUnwind
CreateSemaphoreW
Module32First
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayUnaccessData
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureFile

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 131KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ