0cda21bd4772a160ca15e7b817b64e01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cda21bd4772a160ca15e7b817b64e01
Size

272KB
MD5

0cda21bd4772a160ca15e7b817b64e01
SHA1

fad0641942141d7ff80803d8d638e9f24c5d644f
SHA256

2db2d0506e95277118d85c72e303021669d4dc509adb53c106c6c5b6e748ab6e
SHA512

c598b7140d1b0ba2a294e68c4587cd14a56d020649575363c4dddfa8f23e1491fae78307c21ec64767a558845cf03fe4f8d66a3f244dbda78b22d5572221aed9
SSDEEP

6144:v6NQZFyua9kz2UDCuCCPjrNaa/i6qXKo+hZrj/:vOQZUIaj/yn4aPHhZr7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cda21bd4772a160ca15e7b817b64e01

Files

0cda21bd4772a160ca15e7b817b64e01
.exe windows:4 windows x86 arch:x86

d6b6e3a5e47bacbfb4aefd8023b5b2be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByte
FindFirstFileA
GlobalGetAtomNameW
WriteFile
GetCurrentThreadId
WideCharToMultiByte
ReadFile
SetFilePointer
GetCurrentProcessId
EnumResourceTypesA
GetModuleHandleA
lstrlenA
GlobalHandle
GetSystemDirectoryW
QueryPerformanceCounter
FindNextFileA
EnumResourceLanguagesW
FindClose

newdev

UpdateDriverForPlugAndPlayDevicesA

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ