cd8885414aeed4d46f81e55cc28bba8a | Triage

Sharing

General

Target

cd8885414aeed4d46f81e55cc28bba8a
Size

15KB
MD5

cd8885414aeed4d46f81e55cc28bba8a
SHA1

29f88051d82fee57efe43570dc328bbffd772186
SHA256

327336cb88a3d14fe208b5f0315acbf3abd6a08a7495d7e6ca773bc9b9034c4c
SHA512

eba40a8d0eabe46ec49d94c758c06c24859dfcd86091fa7b618372e6291c25c5e0f757a28008a69e19740121d344f76f1d1c26f5e11abba0d972ab6acea484ff
SSDEEP

384:luxLeTarlDT3azgM59w9oz+T/+ogMuchG2Z+2bTcB:lcLeTclDTqsM09o6TsMucjPc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd8885414aeed4d46f81e55cc28bba8a

Files

cd8885414aeed4d46f81e55cc28bba8a
.exe windows:4 windows x86 arch:x86

94b54113af1cc9f2f9665ea633c71181

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
lstrcmpiA

user32

GetWindowLongA
GetWindowTextA
GetWindowTextLengthA
EnumWindows

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ