cd4cfa1eab834df2426bce415d46b0e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd4cfa1eab834df2426bce415d46b0e1
Size

3KB
MD5

cd4cfa1eab834df2426bce415d46b0e1
SHA1

a8bbebac850be718f627969c7798928c3eecd06c
SHA256

73f0798aa571b6540276faa9184c6bc896a0a9ef6598b0eeeae6678eeac5a993
SHA512

6ceebef6bc54c064a8ee092f4eb33f090af83a4502145e306ea3a69f491c6eb09e45b4614f1ef6bef82f828fee8feba621c46d20533c68bdab969da4f7973b40

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd4cfa1eab834df2426bce415d46b0e1

Files

cd4cfa1eab834df2426bce415d46b0e1
.exe windows:4 windows x86 arch:x86

84f20455c66042b631dff67e77ccf303

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
DeleteFileA
ExitProcess
ExitThread
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetWindowsDirectoryA
LoadLibraryA
OpenProcess
VirtualAllocEx
VirtualFreeEx
WinExec
WriteProcessMemory
lstrcatA
lstrcmpA
lstrcpynA

user32

GetWindowThreadProcessId
FindWindowA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ