cd41a6ff8c76349060ac68314ceb1bd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd41a6ff8c76349060ac68314ceb1bd2
Size

101KB
MD5

cd41a6ff8c76349060ac68314ceb1bd2
SHA1

fd5f2a1ee17aba2093f2aa88e8cacc92a787612e
SHA256

beead461c7561b24c88e605edff219be78d0bdb4a5d86d68485cfc545b2288f5
SHA512

a0b2bc57d81ab3424d83f121d4310d9aaa9a0e813a43d92267cf29aa7d24be7a0c54181a4bb50c095e5818bb491906239f21a1e3ef4b7e69920c8b348ec7928a
SSDEEP

1536:ktXuq+6gHt3p7F2obJFIHMZVIQgRUOhSjJ8dN1tDDXMS/J:kktBAEFiGH4yjut8sJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd41a6ff8c76349060ac68314ceb1bd2

Files

cd41a6ff8c76349060ac68314ceb1bd2
.exe windows:4 windows x86 arch:x86

eebb9fc4d2d3ef6d8181252f7e6e9c90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA

user32

SetWindowPos
SetActiveWindow
SendMessageA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ