cd315e108aa66faa390993ac9baa31ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd315e108aa66faa390993ac9baa31ea
Size

96KB
MD5

cd315e108aa66faa390993ac9baa31ea
SHA1

80b419970f0e72e4dc2e338bba040d7a210e61a0
SHA256

f081b1feee56f3f178e1cb0ac980240b9c05495de9c28930655ffde92a4dd73c
SHA512

2b127c6252f533527896a956fcaf24c446c4331aca82b135a80f312f3993aaf09b0f26fb42e88cc251b637657a45851043c648cd140f91c502d05c577f01fdca
SSDEEP

1536:1UoNJKMfLu5yQpt0pS8QjFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFy:4MS5yw00aL8JE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd315e108aa66faa390993ac9baa31ea

Files

cd315e108aa66faa390993ac9baa31ea
.exe windows:4 windows x86 arch:x86

6ff21dc1be792cba361cd70c0068c489

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
SearchPathA
GetDiskFreeSpaceA
SetEvent
GetStartupInfoA
GetTickCount
DeleteCriticalSection
HeapDestroy
TlsGetValue
VirtualProtect
ReleaseMutex
lstrcmpiA
CloseHandle
AddAtomA
ResumeThread
ExitProcess
GetLastError
PulseEvent
GetModuleHandleA
GetComputerNameA

user32

IsIconic
CreateWindowExA
GetScrollBarInfo
GetMessageA
EnableWindow
DragDetect
DialogBoxParamA
CopyIcon
CloseWindow
CopyImage
EndDialog
DispatchMessageA
CreateMenu
GetKeyState

hlink

HlinkNavigate
HlinkIsShortcut
HlinkTranslateURL
HlinkClone
HlinkResolveShortcut

shell32

DragQueryFileA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ