ce24f290e9886676d0a9a081f0b896702628e57ce345ee4de318185c028f6e0d

General

Target

ce24f290e9886676d0a9a081f0b896702628e57ce345ee4de318185c028f6e0d
Size

424KB
MD5

170a41f5cf5b27654415c3e44067288c
SHA1

4886463000fa062508e4d9986adea5e2def703ed
SHA256

ce24f290e9886676d0a9a081f0b896702628e57ce345ee4de318185c028f6e0d
SHA512

161e22d0d64ac301e96886f26d932761f94e2cc33d2729749e88b000956aba4db23574f2b7a446b56af6d309b8b3a743c75257c6a5404d3353abaae0da2990ac
SSDEEP

1536:uYJ0YNXo2oq3Megbm+OvD5a2IznYaHju:uYyY5ocMlOr5a2Issa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce24f290e9886676d0a9a081f0b896702628e57ce345ee4de318185c028f6e0d

Files

ce24f290e9886676d0a9a081f0b896702628e57ce345ee4de318185c028f6e0d
.exe windows:4 windows x86 arch:x86

6e4b5131accc19c13852d3bfa104dadf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WriteFile
LoadLibraryExW
GetProcAddress
GetModuleHandleW
CreateEventW
GetModuleHandleA
SetEvent
VirtualAlloc
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCurrentThread
Sleep
LCMapStringA
MultiByteToWideChar
SetFilePointer
FlushFileBuffers
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
CloseHandle

user32

SendMessageW
ReleaseDC
LoadCursorA

gdi32

SelectObject

winmm

auxSetVolume

ws2_32

select

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e4b5131accc19c13852d3bfa104dadf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winmm

ws2_32

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 28KB - Virtual size: 32KB

.rsrc Size: 44KB - Virtual size: 42KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 28KB - Virtual size: 32KB

.rsrc
Size: 44KB - Virtual size: 42KB

.shell
Size: 320KB - Virtual size: 320KB