ce05d6780781420b75cbaef20dcdc2efddb90075d7ddf93649650c0cd66c81ed[.]exe | Triage

Sharing

General

Target

ce05d6780781420b75cbaef20dcdc2efddb90075d7ddf93649650c0cd66c81ed.exe
Size

330KB
MD5

82d74b4f750adc83815102bd3bf1ae5c
SHA1

8e9269960a1939b8f33f09ec4d6359b8decc3093
SHA256

ce05d6780781420b75cbaef20dcdc2efddb90075d7ddf93649650c0cd66c81ed
SHA512

0cff6255f2188924a4ddcaa578dc3f52e3be065c0b61e76dc944d419e3c7666f740745cc7b2f294e4ba781fa6b24122bdb35c7b17cfbeb69fd4b6af1b64ab1cd
SSDEEP

6144:dFZOSgIhBBQERJpJBQHEJVLiRz96fUjt7vVOGhDRfFYnOOkwv:Lo4vQ4JWHLz96uvV5bqnOO5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce05d6780781420b75cbaef20dcdc2efddb90075d7ddf93649650c0cd66c81ed.exe

Files

ce05d6780781420b75cbaef20dcdc2efddb90075d7ddf93649650c0cd66c81ed.exe
.exe windows:1 windows x86 arch:x86

04abc6c8fed72932301f16b8ca3d23a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
DuplicateHandle
GetModuleHandleA
CloseHandle
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetLastError
CreateFileA
CreateEventA
WaitForSingleObject
SetLastError
lstrcpyA
lstrcmpA
lstrcatA
lstrcmpiA
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter

crtdll

__GetMainArgs
exit
raise
signal

advapi32

RegOpenKeyExA
RegQueryValueExA

framedyn

?Left@CHString@@QBE?AV1@H@Z

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ