ee614995a50126d9baa3d7ce0f49e3366eba6a669a712e7f9d096185e4f7e1b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee614995a50126d9baa3d7ce0f49e3366eba6a669a712e7f9d096185e4f7e1b6
Size

25KB
MD5

0d6456ba89d222866e69aa1f003e0f5f
SHA1

47920e7605e13d81c17f2015e3b2151ee1121438
SHA256

ee614995a50126d9baa3d7ce0f49e3366eba6a669a712e7f9d096185e4f7e1b6
SHA512

fbe11c482ea29ae0859e3b2e45f7485a7fcd80e3c5d2c7fef90156c19154adbd28f17c8a95074e41d60228ecb6d25d05b5d510294b096d47b4465c5b19e5bf10
SSDEEP

384:+19Xhu8m34lIVZNdEWyTejFR1GIxHZDz1Jq0dZJHU:Az5mImhdEWwaFXDxB1rU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee614995a50126d9baa3d7ce0f49e3366eba6a669a712e7f9d096185e4f7e1b6

Files

ee614995a50126d9baa3d7ce0f49e3366eba6a669a712e7f9d096185e4f7e1b6
.exe windows:1 windows x86 arch:x86

fb74e2a3a03e0d51e3ff32b08efca1b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetModuleHandleA
LoadLibraryA
GetProcAddress
HeapCreate
HeapAlloc

winmm

mciSendStringA

msacm32

acmStreamOpen

user32

LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage

Sections

.data
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ