ce480ab32c41bd3d13ca5b2926e91dd4373bcd5b452dd24180f07aaab32384a8 | Triage

Sharing

General

Target

ce480ab32c41bd3d13ca5b2926e91dd4373bcd5b452dd24180f07aaab32384a8
Size

3.0MB
MD5

20525b897f99459ceba36490ff42c46e
SHA1

aec148b9c0de3ebd2a4ee4ee069be7b3b70f5172
SHA256

ce480ab32c41bd3d13ca5b2926e91dd4373bcd5b452dd24180f07aaab32384a8
SHA512

5443e3a85f44ec18fda0c44f71cc21b6e1df329b93302783e5044b18c36614ecc46b0e4eda857e82c61605cc4c8d5b8785dc756eafb791d562edba0e6d9d2373
SSDEEP

49152:hKaKYs1PD0feND7Mmn+fpGhSlubRY+2lB5rGbsbtJ0bvntlRGJ8zjxEqWsBh:gUsJDEEvX+fgqTB5rGbItJEvnLUOEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce480ab32c41bd3d13ca5b2926e91dd4373bcd5b452dd24180f07aaab32384a8

Files

ce480ab32c41bd3d13ca5b2926e91dd4373bcd5b452dd24180f07aaab32384a8
.exe windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 1.1MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ttbeyvsz
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nmyvfjsn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE