5ceed17b58d235ae00bca61a9ddd9ddc6e7248b1141e2848eff909ee2765b66c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ceed17b58d235ae00bca61a9ddd9ddc6e7248b1141e2848eff909ee2765b66c
Size

657KB
MD5

0075f9bdb8c0c6769e2f9898a367a39f
SHA1

29d434342b2f6a6b26fcaf6ccc016a589cfc1a15
SHA256

5ceed17b58d235ae00bca61a9ddd9ddc6e7248b1141e2848eff909ee2765b66c
SHA512

3fb37265df7828abb357f6bf882f75e167362e17a21c13df3961a556c6b1e98e65aa2a0fad0a578292ebae791a9a607b42a121b1aadc40fc574195e3ec2f64b6
SSDEEP

12288:wi1x55UIEhlCXvkXVg8IBjLvl8NLrcgIHMlNCQQUivUqzxmm5:BGIEuvQERvWxrctHMlNCQQUi8O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ceed17b58d235ae00bca61a9ddd9ddc6e7248b1141e2848eff909ee2765b66c

Files

5ceed17b58d235ae00bca61a9ddd9ddc6e7248b1141e2848eff909ee2765b66c
.exe windows:1 windows x86 arch:x86

187553847b5ea54b105cce03f3a97423

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

setupapi

SetupDiOpenDevRegKey

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 844B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 300B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE