cd0f643d27321836fdb6d8f81e64dad1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd0f643d27321836fdb6d8f81e64dad1
Size

46KB
MD5

cd0f643d27321836fdb6d8f81e64dad1
SHA1

49c045144a68309e60cd1daaebcfb43071ea9197
SHA256

666fd104b1875919e2564e5e87041bf83397184aec58f236b904463ff8d18e94
SHA512

401f3f3e2e0d29ba876436ac5cfd40c52b1b6f5228a72fb7de9eba4cd406ca35cab1ded330974aab877faecad25318818e83afd90021e6ca948f925b81dd2893
SSDEEP

768:IH0qgudGxZ4nCCEe4wgfIdncqGZj1iICw102nbHq8kedESeS3ARn2p1t:dubC44wggMZETwq2bHq8D4ZU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd0f643d27321836fdb6d8f81e64dad1

Files

cd0f643d27321836fdb6d8f81e64dad1
.exe windows:4 windows x86 arch:x86

9b27a7a3b57e3d754896612e09ca4c0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
DdeInitializeA
EqualRect
FrameRect

shell32

DragQueryFileA
RealShellExecuteA
SHCreateShellItem
SHFreeNameMappings
SHGetFileInfoW
StrStrA
SHGetIconOverlayIndexW

gdi32

SetRectRgn
SetRelAbs
SetViewportExtEx
SetWindowExtEx
RoundRect
WidenPath
ResetDCA
GetTextColor
RoundRect

Sections

.text
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE