cd6d37239d03c880859d631e7023c38c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd6d37239d03c880859d631e7023c38c
Size

120KB
MD5

cd6d37239d03c880859d631e7023c38c
SHA1

110ef14a6bc209343672f671fca3d7daac8e445f
SHA256

4d94becf9ed117cb9144b573c825c7559559e028511561a67a256fbe03883b70
SHA512

e1234b8a9b5040a15af96639c889fc488d9c1242e7c49de60a4823318a3439be65a6cd9545b83c1fc5d3b35c6469043eb447b68b0e4e851f432a6ef728aa3c29
SSDEEP

3072:4BEz4oLY+Av9PwcE2amTilseRhKA80CXy:1LY+Av9w3eiCejv80CC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd6d37239d03c880859d631e7023c38c

Files

cd6d37239d03c880859d631e7023c38c
.exe windows:4 windows x86 arch:x86

1860511a3f134a1bebefd274b158bd6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
FindResourceA
LoadLibraryA
GetProcAddress
GetModuleHandleA
SizeofResource
WriteFile
CloseHandle
GetModuleFileNameA
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetLastError
SetFilePointer
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ