cd8de6e981fe09bbf48fb2edb29e3f62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd8de6e981fe09bbf48fb2edb29e3f62
Size

51KB
MD5

cd8de6e981fe09bbf48fb2edb29e3f62
SHA1

d56e789caf33b76944909a4f0372fb84754d2656
SHA256

dd8987381c1931c9832aa2f69161960879aaee0e6ab1f0e441c73b751f437296
SHA512

d643c106bc29463c69472c4b0f647f0a25fbadef7e275a068442676a0c9fda4047ae2e08fc555c0a5cce29e9f4b24e5d5ef08dfacf15a9b19af12d08759ec171
SSDEEP

1536:8fy1n8tDZtvUX/F2DljOVpX+qW4md4czGp9q0gM6:Z181sPF2sVZPTcap9qlM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd8de6e981fe09bbf48fb2edb29e3f62

Files

cd8de6e981fe09bbf48fb2edb29e3f62
.exe windows:5 windows x86 arch:x86

09305cb1a4c6800fbd4f226eb2fc451a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW
wnsprintfA
StrStrW
PathCombineW
wvnsprintfA
PathFindFileNameW
PathRemoveFileSpecW
StrCmpNIW
wvnsprintfW
wnsprintfW

advapi32

CryptAcquireContextW
RegCloseKey
RegQueryValueExA
CryptDestroyHash
RegCreateKeyExA
DuplicateTokenEx
CryptCreateHash
GetUserNameW
RegEnumKeyExA
CryptGetHashParam

kernel32

GetCommandLineA

Sections

.ozyp
Size: 41KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sjkxer
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hctsr
Size: 6KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ