0cdd45e082fa6fe89fdad63a63de67f8 | Triage

Sharing

General

Target

0cdd45e082fa6fe89fdad63a63de67f8
Size

268KB
MD5

0cdd45e082fa6fe89fdad63a63de67f8
SHA1

9fc6e5ff93ab7904e69900702be6805ee07d8b6a
SHA256

786f0ea50d85907d94db327a91e8018a6f666638589708c77a0b4a5211b802fa
SHA512

81cdd46bdf632002c57624cfe27313e9fbf0d196a462759f9bc12b791942266ea123e9165844e82a777c5802f7a4117464dc32bfaca3ba47f5f89c26112a0530
SSDEEP

6144:dNMb2ozFV8swEcwK2MoMAARIeLZ6uDaCScUjw3:FoTcDwK2MzAGIeLZ6TCScU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cdd45e082fa6fe89fdad63a63de67f8

Files

0cdd45e082fa6fe89fdad63a63de67f8
.exe windows:5 windows x86 arch:x86

4be9b83e30125ee902427382788fa369

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
DeleteFileA
FindClose
GetFileTime
GetLocalTime
HeapAlloc
lstrlenA
GetCPInfo
GetCommandLineA
OpenFile
ReadFile
HeapFree
CopyFileA
GlobalFree
OpenFileMappingA
WriteFile

advapi32

RegFlushKey
RegEnumKeyExW

user32

LoadCursorA

Sections

.b8b22
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.4h3d5
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.782a
Size: 222KB - Virtual size: 518KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.946df
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ