cd572b3f641066798edf969e51285656e10ced73433e3f37237f91081724e35e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd572b3f641066798edf969e51285656e10ced73433e3f37237f91081724e35e
Size

5.5MB
MD5

a97786052a0a8ec14b7e9ec7cd9d155e
SHA1

2a8fee1867a632d08a2fa0c4938d4264f5c11776
SHA256

cd572b3f641066798edf969e51285656e10ced73433e3f37237f91081724e35e
SHA512

b9627b09a0a767258ca5b57cae14d27851bb5d65af551368ad8d7ffc5550e070616067c1556283da8f33697395d6041f8f431900557b7e5d5aa6f60369623458
SSDEEP

98304:Gtti6lklfOVFC1ZhCjIcOzk8QI1pzJ/ch5Qa029VDhIoJ1cWvX9Gh:Gt3m1ZqIcOATI1p5ch5L027yoc+9Gh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd572b3f641066798edf969e51285656e10ced73433e3f37237f91081724e35e

Files

cd572b3f641066798edf969e51285656e10ced73433e3f37237f91081724e35e
.exe windows:5 windows x86 arch:x86

001cedc5baae214561e6afa8fe80c2ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

DefWindowProcA
CharUpperBuffW

gdi32

GetStockObject

Sections

.text
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lL{
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.`Qg
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s#=
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g D
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ