ce23af889498ff1156ededdbdb77e4db | Triage

Sharing

General

Target

ce23af889498ff1156ededdbdb77e4db
Size

6KB
MD5

ce23af889498ff1156ededdbdb77e4db
SHA1

70574cc416e4131cca6b51a0603cc1d06b552d01
SHA256

4c1970afc0eb21dce8f34e1eb9d7fe644837bb1917cfb5d209b7ef84b8340ad6
SHA512

3783577b4a6d6b2971ed453c411274908a10f5b732b16313b1d2ea43a3f1bee70482ca05417f219def0a793eb45209ca6e5a85fc1dfba5fed0f219c48644577b
SSDEEP

96:zIzqY1CgEjDkDMhYUG/MreQGGBvuaRvLNGfIRi0IDiPuVut/Rj:EzgrjDuL/Mr5BvumLHRi0IuPOut/Rj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce23af889498ff1156ededdbdb77e4db

Files

ce23af889498ff1156ededdbdb77e4db
.exe windows:4 windows x86 arch:x86

0c12c1d512453ee9c2574ef52bc5167b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetProcAddress

psapi

EnumProcesses

Exports

Exports

getBuss
getCuss
getMuss

Sections

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE