c0d1db827d6c4eexeexeexeex[.]exe | Triage

Sharing

General

Target

c0d1db827d6c4eexeexeexeex.exe
Size

971KB
MD5

c0d1db827d6c4e70945c5f3f2b78e273
SHA1

be18e5ec68dc1ffa7e11d26ae1648e06cbe6f76a
SHA256

5bfc537828bd5a64d76df87f98e80d9a345e8eefaaad7dec5a51c26f0d9cac48
SHA512

310af04f88f35257bbe0bf60e58a737fd2facead0b33a79eac78bf4fbbc3e8b5737a880dd0df14dd09e10d87a176b1c520f8ad1d6657d0453f99803de91734cf
SSDEEP

24576:vGmj8GFiYBcNDDot26QkBqbVJS04SiK8xnHauv+:vGmg/lDtx/D4SS+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0d1db827d6c4eexeexeexeex.exe

Files

c0d1db827d6c4eexeexeexeex.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ