cedd648e5948c8e74b5e653b910f298352716cd1fba261e30b04dc5f2301b67a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cedd648e5948c8e74b5e653b910f298352716cd1fba261e30b04dc5f2301b67a
Size

119KB
MD5

f1b9ca4b4bd295606f11cbc203523e9c
SHA1

ffdb6a689ac7ed5d1330af3933450da59ee27f23
SHA256

cedd648e5948c8e74b5e653b910f298352716cd1fba261e30b04dc5f2301b67a
SHA512

e14cbe929cf13f9f49a08ed2948570449d8cbf7b272fb1763fa6980c3f105b897cca350ac13a6115067a03a91ec8a3c77e8ee202faac0753cd348d9320acfc71
SSDEEP

3072:gNtc+W/p0BAQs25mdwBJ92n2Uo3YrAlC2vTwPx1MEmCDjovepVSvZ5D8dGewqCnM:9nxL0rW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cedd648e5948c8e74b5e653b910f298352716cd1fba261e30b04dc5f2301b67a

Files

cedd648e5948c8e74b5e653b910f298352716cd1fba261e30b04dc5f2301b67a
.exe windows:6 windows x64 arch:x64

d2811f82150de0fe028a3e28a28171fd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemTimeAsFileTime

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ