cef030367be3e178431cb72dbb2aab7ce2cbc4547f6e5a26e9826fbb14fd21c5[.]exe

General

Target

cef030367be3e178431cb72dbb2aab7ce2cbc4547f6e5a26e9826fbb14fd21c5.exe
Size

228KB
MD5

7b9e8ac029579cc531882e63fde284f9
SHA1

05b6b27af46daca7964b34fdef2c0536606a414d
SHA256

cef030367be3e178431cb72dbb2aab7ce2cbc4547f6e5a26e9826fbb14fd21c5
SHA512

35bda5e464f8aab8cab2d18a44f9ced5be2c626515afc6902da4df1930aa8de365b22280a8aa3c454decc77cfd4e225f3db4e6d2b3153497a41b237834fa66e6
SSDEEP

6144:nxkF6MpFI0oyObaZaRxBCGNLtDRmHNLd8tlP+m6mi:ovp5za5hNLxRG18WTmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef030367be3e178431cb72dbb2aab7ce2cbc4547f6e5a26e9826fbb14fd21c5.exe

Files

cef030367be3e178431cb72dbb2aab7ce2cbc4547f6e5a26e9826fbb14fd21c5.exe
.exe windows:5 windows x86 arch:x86

7dc1a9a8cf4eba6ce3a9bddf8da32df3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetClipRgn
GetMetaRgn
GetCurrentObject
GetGraphicsMode
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetRandomRgn
GetStretchBltMode
GetSystemPaletteUse
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextCharset
GetFontLanguageInfo
SetSystemPaletteUse
SetTextColor
SetTextAlign
SetTextJustification

user32

GetPropA
RemovePropA
SetWindowTextA
GetWindowContextHelpId
GetMenuContextHelpId
GetCursor
GetWindowLongA
LoadIconA
GetScrollPos
EndPaint
BeginPaint
GetWindowDC
GetDC
GetForegroundWindow
DrawTextA
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenu
EnableWindow
IsWindowUnicode
GetQueueStatus
GetInputState
SetFocus
CheckDlgButton
SetDlgItemTextA
GetDlgItemInt
GetDlgItem
EndDialog
MoveWindow
ShowWindow
PostMessageA
SendMessageA
WindowFromDC

kernel32

MoveFileA
GlobalHandle
GlobalSize
GlobalAlloc
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleA
GetTickCount
GetVersion
IsProcessorFeaturePresent
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetProcessHeap
HeapAlloc
QueryPerformanceCounter
GetLastError
IsDebuggerPresent
WriteFile
SetFilePointer
GetFileType
FlushFileBuffers
DeleteFileA
GetStdHandle

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dc1a9a8cf4eba6ce3a9bddf8da32df3

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

Sections

.text Size: 180KB - Virtual size: 180KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 14KB - Virtual size: 30KB

.reloc Size: 30KB - Virtual size: 29KB

.text
Size: 180KB - Virtual size: 180KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 14KB - Virtual size: 30KB

.reloc
Size: 30KB - Virtual size: 29KB