cd4678cb4ce3e1a8c600e8484e2b8c2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd4678cb4ce3e1a8c600e8484e2b8c2d
Size

83KB
MD5

cd4678cb4ce3e1a8c600e8484e2b8c2d
SHA1

9bd427d321f66296101c1a832bf05dccca654c91
SHA256

5bd6121a135d05e2570271bb249cbd588f1db30fd44917c61b957e775331915a
SHA512

3f06ebc9c335a0c9a2b64f0c355ffff926a9ff7ad6753c1c8b599ae7e0a33520c4e08d6ea73aa059f7c8395497da6cd4206b94a46489cb11599883b6243e56e9
SSDEEP

1536:E8VWdR1VGojmUI+auKBrNZM63AXdIa+mUvmipjVrs2ryrd1vUQuqwcizSkX:6d5GojhI+aVM63CdumiHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd4678cb4ce3e1a8c600e8484e2b8c2d

Files

cd4678cb4ce3e1a8c600e8484e2b8c2d
.exe windows:4 windows x86 arch:x86

7cc22173d41faf874a353517454a1b2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosPathToSessionPathA
HeapExtend
GetUserDefaultUILanguage
ConvertDefaultLocale
CreateVirtualBuffer
SetFileAttributesA
AreFileApisANSI
LocalAlloc
SizeofResource
MapUserPhysicalPages
VerLanguageNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE