ce01c01a64d0074468c718b11e6cd470N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ce01c01a64d0074468c718b11e6cd470N.exe
Size

11KB
MD5

ce01c01a64d0074468c718b11e6cd470
SHA1

b1a52eb203b436b066e29727f6dbc0f0870a1aa9
SHA256

1908ce46b2b78a07a206e5c928bf4890cc6699750b841054cc409092b57fa10e
SHA512

888cd02bc96db976d11b74bf125c5a350e7490cfd12d8fe1fbe6c704389208224584d08b0cee4395426f18600fb52e04fad5c259cae85aa7a15c1ba06e5cfe33
SSDEEP

192:/tnYEADOVtXqsjBV7+p13vpw2EL3VuAW23ThHhFyJtmdTHu0uiWBJ:lUnYV78w2ELMAW25yJtmdvuiWj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce01c01a64d0074468c718b11e6cd470N.exe

Files

ce01c01a64d0074468c718b11e6cd470N.exe
.dll windows:1 windows x86 arch:x86

c837867bbf630a281a7837120262a2b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
ExitProcess
GetEnvironmentStringsA
GetModuleFileNameA
InitializeCriticalSection
LeaveCriticalSection
ReadFile
RtlUnwind
DeleteCriticalSection

user32

GetWindowTextA
GetWindowTextLengthA
GetParent
CreateDialogParamA
DialogBoxParamA
EndDialog
GetDlgItem
MessageBoxA
SendMessageA
ShowWindow
EnableWindow

crtdll

_fdopen
_open_osfhandle
_strnicmp
tolower
atof
fclose
fgets
fopen
fprintf
free
_cexit
malloc
printf
raise
realloc
setbuf
strcpy

Exports

Exports

DllMain
checkSpampalVersion
createConfigDialog
filterOnMessageBody
filterOnMessageHeaders
getPluginAuthor
getPluginDescription
getPluginHomepage
getPluginName
getPluginVersion
loadConfig
releaseConfig
requireBodyFiltering
saveConfigFromDialog

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 928B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 760B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 396B - Virtual size: 396B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 488B - Virtual size: 488B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c837867bbf630a281a7837120262a2b6

Headers

File Characteristics

Imports

kernel32

user32

crtdll

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.bss Size: - Virtual size: 40B

.rdata Size: 84B - Virtual size: 84B

.data Size: 928B - Virtual size: 928B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 760B - Virtual size: 760B

.reloc Size: 396B - Virtual size: 396B

.edata Size: 488B - Virtual size: 488B

.text
Size: 4KB - Virtual size: 4KB

.bss
Size: - Virtual size: 40B

.rdata
Size: 84B - Virtual size: 84B

.data
Size: 928B - Virtual size: 928B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 760B - Virtual size: 760B

.reloc
Size: 396B - Virtual size: 396B

.edata
Size: 488B - Virtual size: 488B