ce88f6dcdfec724f1797353f6241b38372ffb88050c931c628bfc3a3fe96862e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce88f6dcdfec724f1797353f6241b38372ffb88050c931c628bfc3a3fe96862e
Size

248KB
MD5

09a049ec4a09911032ba876ca6d55483
SHA1

cd0547f5b3990e045eb68659ff3c88ec98bd6066
SHA256

ce88f6dcdfec724f1797353f6241b38372ffb88050c931c628bfc3a3fe96862e
SHA512

e74ceb97b9cdf71abcbb8a94a2e1b63f05985d6f97c9252633f0c895096cd1b298690d714e8683a7a209c69e1d5e6653a69d92c565725839ea35877fbf0f088d
SSDEEP

3072:P2lmwbeSUcHu6XvIkw9/SUo4fvQ/aV1zROBJrVFM0Pt3LEC0tgim:mbeSUb6XgkwwovQ/izArVFZFl0yi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce88f6dcdfec724f1797353f6241b38372ffb88050c931c628bfc3a3fe96862e

Files

ce88f6dcdfec724f1797353f6241b38372ffb88050c931c628bfc3a3fe96862e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

CreateInterface

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 33.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Katja
Size: 143B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Silvana
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE