15cdd4af3df94ca3fcc803a9b85521c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15cdd4af3df94ca3fcc803a9b85521c7
Size

76KB
MD5

15cdd4af3df94ca3fcc803a9b85521c7
SHA1

14dbd49c6c82508d5200e56b99278d05325ea138
SHA256

6b451c091cb99fc175497929f517d4f1693a27f7e2105eae87632365ff358784
SHA512

3b69fe6bfa5d4273277ec9e07c210fe9d13a48d3d3e097c1e40f1d59bc9c7cf4b40b2a15e0954e463f4a9dd1ca49c1c09ca6299c780f9a53d716dad789ea3ace
SSDEEP

1536:e5/2Pe3wVYg5vwSLzrgCfI2BxAk1XhnBe9:e5/2PmRy3/BxAk1xnBe9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15cdd4af3df94ca3fcc803a9b85521c7

Files

15cdd4af3df94ca3fcc803a9b85521c7
.exe windows:4 windows x86 arch:x86

26aa165cb09d964b16af94a03e723291

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryW
SetLastError
GetLastError
FreeLibrary
HeapFree
GetVersionExA
LoadLibraryA
GetCurrentThread
GetCurrentProcess
lstrlenA
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
TlsGetValue
TlsSetValue
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ