CD_Start[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CD_Start.exe
Size

258KB
MD5

69ddee233569f114e35b1e6a2c8ca0ae
SHA1

8f121163eb32de150fc4e894680a00be8883db41
SHA256

b9f189c34050d5ad6ef7bcda95b4ac7941655a62b122000b6e6012a387f89c24
SHA512

60518b3cadef65546696c0610d416db098260e0e8c3ba5ff2ee4f9e3e0cd8e5a15412fd2b1505da11102db29ece3180260324da0d9b7b7042d05b64bfd77319b
SSDEEP

6144:IGyJNDqZScQl7qbbaqzZeoRP0YlnVPA63:IGQNDljabTeoR0YlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CD_Start.exe

Files

CD_Start.exe
.exe windows x86

fa4fc80b3d7c963fe3627e6f0a5181de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

version

GetFileVersionInfoA

msvfw32

DrawDibOpen

user32

MessageBeep

gdi32

GetObjectA

comdlg32

GetOpenFileNameA

winspool.drv

ClosePrinter

advapi32

RegOpenKeyExA

shell32

DragQueryFileA

comctl32

ord17

oledlg

ord8

ole32

StgOpenStorageOnILockBytes

olepro32

ord253

oleaut32

SysStringLen

winmm

waveOutClose

Sections

.text
Size: 244KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE