cd0d9a022bad2ded8272b67af0939ab9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd0d9a022bad2ded8272b67af0939ab9
Size

29KB
MD5

cd0d9a022bad2ded8272b67af0939ab9
SHA1

60c363f7be401d2d721e1a92da16d36a398caf8b
SHA256

6cd760d5c3db1c2bd821b8626edf50d0c04d17df9b55ad8b214163d5251804bb
SHA512

b060fe4ea4021accfe5d90ab69fa620e3336c534fc51bf9db54510d36e20168026aec9cc5a4f1be4657ad73329640dbe05f0e753e5c265f1e7e88986063c6ec3
SSDEEP

384:DFVepLnzd9YtHsRp+9XJLYGbpouzIM2lAtghQY8V+DBm:DKLYjPbCuz47x4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd0d9a022bad2ded8272b67af0939ab9

Files

cd0d9a022bad2ded8272b67af0939ab9
.exe windows:4 windows x86 arch:x86

9aaa0135f5722fed6500b9fcc064c607

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GlobalUnlock
CreateMutexA
CreateFileW
GetExitCodeProcess
SetLastError
lstrlenW
HeapCreate
GetProcessHeap
GetCurrentThreadId
GetStdHandle
GetEnvironmentVariableA
lstrcpyA
GlobalFree
CloseHandle
GetModuleHandleA
ReleaseMutex
FindResourceW
TlsGetValue
UnmapViewOfFile

user32

SetFocus
DrawMenuBar
IsWindow
CheckRadioButton
CallWindowProcA
GetCaretPos
GetDC
DrawEdge
CreateMenu
GetDlgItem
FillRect
CreateWindowExA
DispatchMessageA

rsaenh

CPDeriveKey
CPGenKey
CPHashData
CPDecrypt
CPSignHash

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

evcuyfd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE