002cef456fc3955844f7934240edfdda | Triage

Sharing

General

Target

002cef456fc3955844f7934240edfdda
Size

62KB
MD5

002cef456fc3955844f7934240edfdda
SHA1

e0d933096ac391755c0dc17877e2ef1fa8a51013
SHA256

5384fa076b255f80bbaa57121687aa238e0bf184a94882fce1987ccf58432132
SHA512

ceb91f4d049b153194b1791d9b4ca548393e11453ed4796d4e7fcb17f4bc2b5b2f479f62b83234457830570b278b86e3a268571e4f6e5b8408c4627963963b7a
SSDEEP

1536:vFFIcNhwAlPQzRssMm0M1bOCw9A7C/74ydf:vFOcNHlQzRssiCEXf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002cef456fc3955844f7934240edfdda

Files

002cef456fc3955844f7934240edfdda
.exe windows:4 windows x86 arch:x86

5bb5e08ca7243656692dd34f7ceb17f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_XcptFilter
_controlfp
_except_handler3
_exit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit

user32

SendMessageA
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
RegisterClassExA
LoadStringA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExA

kernel32

GetModuleHandleA
LoadLibraryA
GetTempPathA
CreateFileW
lstrcatA
GetFileType
CloseHandle
GetFileSize
GetStartupInfoA
DeleteFileW
lstrcpynA

gdi32

CreateFontIndirectA

comctl32

InitCommonControlsEx

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE