cd028e2e6aaf00611340db64f2922b02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd028e2e6aaf00611340db64f2922b02
Size

25KB
MD5

cd028e2e6aaf00611340db64f2922b02
SHA1

4687d13803dd22f1c74eb819ff23ca8413b78535
SHA256

e086a743d4426f897a44e96951d89507d472bff49ce2e45309fcb2e63b1700d2
SHA512

fad1713a7f2392486c7d692649bdd1dddff1cb7dd6a5ba808f8d4b94db711386faa132c4b4c95713af63e443f3cbb556c1b9205def37ab65a3e25ce4432bd062
SSDEEP

384:nO1XLh3My9T8gpeAr+UZxKBUSEJziC7Co+mF:a7lXZxKBUSyzBmon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd028e2e6aaf00611340db64f2922b02

Files

cd028e2e6aaf00611340db64f2922b02
.exe windows:4 windows x86 arch:x86

546be6c069873e9ac0ebb56db61e362b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
wsprintfA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

imagehlp

BindImageEx

kernel32

TerminateProcess
FreeEnvironmentStringsA
GetWindowsDirectoryA
GetModuleFileNameA
GetPrivateProfileStringA
Sleep
LocalFree
FormatMessageA
WriteConsoleA
GetLastError
GetVersionExA
GetStdHandle
AllocConsole
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
SetHandleCount
GetCurrentProcess
UnhandledExceptionFilter
HeapDestroy
GetFileType
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
LoadLibraryA
HeapCreate
VirtualFree
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 819B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE