ecaaee38e18ca216ae60a0af4098dc5aabccca516b2321cffdf3d038c88cc2e2 | Triage

Sharing

General

Target

ecaaee38e18ca216ae60a0af4098dc5aabccca516b2321cffdf3d038c88cc2e2
Size

44KB
MD5

7d13b7a8bcd35906e96c3e3e6b561536
SHA1

89071f9b48238de3889b2115ccd64d4b3550e00d
SHA256

ecaaee38e18ca216ae60a0af4098dc5aabccca516b2321cffdf3d038c88cc2e2
SHA512

016782e4c15305039566645b63c105078627e6ae096a3ddc21aae01dc5ef96d8924fd51d12b64698a6c88d176ff8633220250d7d40c311e180d7e1d3940e572e
SSDEEP

768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAwwf:b/pYayGig5HjS3NPAdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecaaee38e18ca216ae60a0af4098dc5aabccca516b2321cffdf3d038c88cc2e2

Files

ecaaee38e18ca216ae60a0af4098dc5aabccca516b2321cffdf3d038c88cc2e2
.exe windows:5 windows x86 arch:x86

ad86a1414a0514f4c041167365378f70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
GetMessageA
DrawTextA
ShowWindow
UpdateWindow
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
PostQuitMessage
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ