e2ce016230042341dd767efcda8511b655c0feb3608d3647ac5bc5420b0390cb | Triage

Sharing

General

Target

e2ce016230042341dd767efcda8511b655c0feb3608d3647ac5bc5420b0390cb
Size

74KB
MD5

1122038d14358023301840bf96c92f7e
SHA1

ae791af586914be49dace25b646b8f6db0d40cdc
SHA256

e2ce016230042341dd767efcda8511b655c0feb3608d3647ac5bc5420b0390cb
SHA512

8ee269f84aeff5ab4793416b319f7a44ba38967520249c752e8c77e82c153232548685b363639430a241a8f667737f548228d6852cecf8f5d20b8aa69187e64e
SSDEEP

1536:14QYxd5ngUaB4tcVsfDGwZSk3QDTcFMxTGigP+LN3P78XsGyelTf4JPG:U1EvMCTyI/ksGySz4BG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2ce016230042341dd767efcda8511b655c0feb3608d3647ac5bc5420b0390cb

Files

e2ce016230042341dd767efcda8511b655c0feb3608d3647ac5bc5420b0390cb
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE