c00dd288f74c84b01489241e360edcba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c00dd288f74c84b01489241e360edcba
Size

66KB
MD5

c00dd288f74c84b01489241e360edcba
SHA1

03beea8be688366a9584220df3c772c30120bd90
SHA256

f96afe892449cf8ad287a66cb2836279e6e9ec2d1d11fb19c90ea36005f6f573
SHA512

e4190ec657566548b73956d3d64789210da3ccb209e8d42a8e6bbfd264e6b81f68e46575e6a878e676b0b7c5d239ed71e9ac3660c60270c0fb7b4a70b9cba741
SSDEEP

1536:sTihrlw9nXe64UTI5pIFftrwdmvsANwk9zV5hiF2:Kuru9nO6NHlMEse5V5hI2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c00dd288f74c84b01489241e360edcba

Files

c00dd288f74c84b01489241e360edcba
.exe windows:4 windows x86 arch:x86

328212b6e403db0c1bef7185b05d5545

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
GetEnvironmentVariableW
CreateDirectoryW
GetProfileStringW
GetGeoInfoW
ResumeThread
SetUserGeoID
SetLastError
WaitCommEvent
ActivateActCtx
BaseCleanupAppcompatCache
CreateMutexW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE