c8ddadd424a26ee0d207d6f3dcba2ca1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8ddadd424a26ee0d207d6f3dcba2ca1
Size

8KB
MD5

c8ddadd424a26ee0d207d6f3dcba2ca1
SHA1

2d7a4368065b8ae835ed13964cd9e7bef1745cf5
SHA256

53e200a27ca475ece6eaf17d344abc4168f14179c6edbb1ad4c66a682a23686e
SHA512

47b63e90a2029df9da9733a3ad88de31ba7b34ca2f8319517e25cda4b8999527c7a4a993096254533dc1123b2d942f484b48f483563726cfb384ca8f70b1a793
SSDEEP

96:JitgkxJH5q2hxVE6xN+TmUWwpAqwvL+4odCehOW+Hv88cnaW5HyGUmyZ:4tZLHA2hxfPNUNIvL9odqW+08byS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8ddadd424a26ee0d207d6f3dcba2ca1

Files

c8ddadd424a26ee0d207d6f3dcba2ca1
.exe windows:4 windows x86 arch:x86

e2bf10fcb6977cb97a081d462a036b6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ