2cebec2ce36b86e03d002c00d597b5c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cebec2ce36b86e03d002c00d597b5c4
Size

277KB
MD5

2cebec2ce36b86e03d002c00d597b5c4
SHA1

9eceecd6785c7d0fd5f7ff10e4ae3297380c1c26
SHA256

9dce90453e484f7e34f4fb61fc0445223bf297e4bee01d9c00dd3a26c7e1e2a5
SHA512

5062fc7a23a364fe46d855838863d8f07226a0e5eb5cf23ba7bdbc806c45f713cfa9c93b5dddc023d5017f17fae948323cce5459e9f5cc0c082a81756a6c66fb
SSDEEP

6144:fD+aH+lcHedl8RZH5Y+B4xbk1B1yrXD/c2Qtq:fD1Fkp+FOrA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cebec2ce36b86e03d002c00d597b5c4

Files

2cebec2ce36b86e03d002c00d597b5c4
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\d1lap5lin\obj\Release\QQf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ