ce20e6b0076b65fc5c45c0b624f64bc8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce20e6b0076b65fc5c45c0b624f64bc8
Size

72KB
MD5

ce20e6b0076b65fc5c45c0b624f64bc8
SHA1

9920bb21c1188ba1a5086de345ee8b6c1e1564c5
SHA256

3ca4dc73b1e63fdfbfe363380922aee50473b8e22d0643f01892cf119f166a11
SHA512

2d8672455f567d3ee1c3cf345a7efb1b775b5348448118cd85970dbc203445604ff20a3ffb52b83e4a0b319b9d3b1dc9b800a1a3dfd8a7e3fbe62313c704af96
SSDEEP

1536:ghLNFb5e7V8tdjkuo/5BIe28aDUSl8j7zOLvpxxnsiw:khM85ezuUSl8jPQBsR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce20e6b0076b65fc5c45c0b624f64bc8

Files

ce20e6b0076b65fc5c45c0b624f64bc8
.exe windows:4 windows x86 arch:x86

52bc6ba334d38cbb4c41fae0ebbb206a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
LocalFree
CloseHandle
GetTickCount
GetSystemTime
ExitProcess
GetComputerNameW
GetModuleHandleW
GetFileAttributesA
ResumeThread
ResetEvent
lstrlenA
SuspendThread
GetCommandLineW
GetDiskFreeSpaceW
FindAtomW
CreateFileA
LoadLibraryA
VirtualAlloc
GetPrivateProfileIntA

user32

DestroyCaret
DrawStateA
GetClassInfoA
EndDialog
GetCaretPos
CallWindowProcA
GetClientRect
GetMenu
DispatchMessageA
CreateWindowExA
FillRect
GetDlgItem
CloseWindow

rasapi32

DwCloneEntry
DwEnumEntryDetails
RasDialA
DwRasUninitialize
RasDeleteEntryA

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ