c0d4e17ee9c7066b8cfc0dd0d1828194 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0d4e17ee9c7066b8cfc0dd0d1828194
Size

25KB
MD5

c0d4e17ee9c7066b8cfc0dd0d1828194
SHA1

928e7dfd8129fce012d6ebe79a6c85f047fe18fd
SHA256

94289325e2702c1593d45fac628e5923b4b8683eeb828333acd54eaf8c331f08
SHA512

9a87abf7e05134e347234ed30844f34d32560d57e6934833d6cce1cab82bd1527b271817ebb8d3ee5bfd0f3ad1fe9f52c1be09d87fd20c2cee2347880eea98a4
SSDEEP

768:JeSzpezOGM4U+7m6dNi3mH2AddaaZ0FARj0J:PperM4U+7m+1H2YaaZbV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0d4e17ee9c7066b8cfc0dd0d1828194

Files

c0d4e17ee9c7066b8cfc0dd0d1828194
.exe windows:4 windows x86 arch:x86

3b0ae38465c104e24e54f30e88cfcb15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
LoadLibraryA
DefineDosDeviceA
QueryPerformanceCounter
FindResourceExA
WaitNamedPipeA
SetConsoleCtrlHandler
GetEnvironmentVariableA
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ