serer[.]exe | Triage

General

Target

serer.exe
Size

117KB
MD5

abc26815c6f295377f7cf3ece87f75fa
SHA1

fad4a27e42a7f59ea91ae50b8a15cfaa661b216b
SHA256

1f1e99b375b5c611027a91a058d753195516518c27b2bb5bb01575b607d80e43
SHA512

f6f88d2513ba683e9bf561f74de5da53b5857953dc088218635bc05128e9a1cbd7319502ab9c706383056bdfa7019c98c34f4b02572050aee5d40f7f6a610b3f
SSDEEP

1536:YpuSx3qcmSY2/aopTq5+VquKWeo/TlfUCQ8XaFb34XEdm6hW9p:YpuSx6DuaiTqQVquKWbXaaXym6hW9p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
serer.exe

Files

serer.exe
.exe windows:4 windows x86 arch:x86

83d0c3c58247df530389eac22be1f972

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

memset
_strnicmp
strncmp
strlen
strncpy
_strdup
free
strcpy
memcpy

kernel32

GetModuleHandleA
HeapCreate
CreateProcessA
HeapDestroy
ExitProcess
OpenProcess
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
WaitForSingleObject
GetExitCodeThread
VirtualFreeEx
CloseHandle
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCurrentProcessId
InitializeCriticalSection
GetModuleFileNameA
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
CopyFileA
WriteFile
CreateFileA
ReadFile
SetFilePointer

user32

MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows

comctl32

InitCommonControls

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.code
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flat
Size: 512B - Virtual size: 55B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

83d0c3c58247df530389eac22be1f972

Headers

File Characteristics

Imports

crtdll

kernel32

user32

comctl32

advapi32

shell32

Sections

.code Size: 5KB - Virtual size: 4KB

.text Size: 7KB - Virtual size: 6KB

.data Size: 104KB - Virtual size: 104KB

.flat Size: 512B - Virtual size: 55B

.code
Size: 5KB - Virtual size: 4KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 104KB - Virtual size: 104KB

.flat
Size: 512B - Virtual size: 55B