cd38fc123f6f8482b92fed7e52a411f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd38fc123f6f8482b92fed7e52a411f1
Size

23KB
MD5

cd38fc123f6f8482b92fed7e52a411f1
SHA1

469e8dba049c77ba87a9596b9b235dc0fb5ed6f1
SHA256

24177f7d54effde0897bf5279a4b7d564aea2c6fe5c634ce8281aac7cfb14f2b
SHA512

74187695af3b5445bc30df07c5db39d7bc3b3ba94c0b3dd76899bdb7165eab3bff836b06a0167a0769dd8cca14827f889f7e1bfda374b378aac35899da5f41b9
SSDEEP

384:6InCkSnZegGOBLg5hjrT0Cj/CklOteF0pXJLTWOvLk9yr7zudvMEK8fI2KKXFtn:6IsvBLm5BR+a0pZvWOLgyHzsvMN8w2Kq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd38fc123f6f8482b92fed7e52a411f1

Files

cd38fc123f6f8482b92fed7e52a411f1
.exe windows:4 windows x86 arch:x86

7618e3b2936b71fece428a4ac7435dbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtectEx
WriteProcessMemory
GetThreadContext
SetThreadContext
LoadLibraryA
CreateProcessA
GetCommandLineA
GetProcAddress
ResumeThread

gdi32

CreateDCA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE