0ceaac147f0da6f556769ffa074e73de09b8b733a149c756f9514daa545bbbf8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ceaac147f0da6f556769ffa074e73de09b8b733a149c756f9514daa545bbbf8
Size

63KB
MD5

1539bd01259ef2bcac2354b8eb63c648
SHA1

beb6c4dffac57788e8478a1d3d2c9e8aab2da40a
SHA256

0ceaac147f0da6f556769ffa074e73de09b8b733a149c756f9514daa545bbbf8
SHA512

c39688d646d3764dedebcc3c7b3a506d3a5668b2378f5846452fb27a5c8465cf2fc9fb25ae447371b0052fd4885abc8d53278983b0490956dfe114365ce9a7d5
SSDEEP

1536:dld86bMQrKGRZJWnutmqgxs/NLptZ/8Xcy:Xd8utrKGpWnzKF/6Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ceaac147f0da6f556769ffa074e73de09b8b733a149c756f9514daa545bbbf8

Files

0ceaac147f0da6f556769ffa074e73de09b8b733a149c756f9514daa545bbbf8
.exe windows:4 windows x86 arch:x86

bd679f2ce12a17c0e8f2d3ebf5319e01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
EscapeCommFunction
RtlMoveMemory
WriteConsoleInputA
Process32FirstW
SetSystemTimeAdjustment
CeipIsOptedIn
CompareStringEx
EnumResourceLanguagesExW
SetConsoleKeyShortcuts
IsSystemResumeAutomatic

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE