cdab0045e3b6ba4ea5dc3eb154389c44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdab0045e3b6ba4ea5dc3eb154389c44
Size

9KB
MD5

cdab0045e3b6ba4ea5dc3eb154389c44
SHA1

d0f534a01c8c2b4fa31998ec3613f306b783eee3
SHA256

b6ddf3f33a16431e31190145c92302344d0471b310deb84e0babd59901f72b88
SHA512

63ea928b98cdc22dfab3ca3825e0e0b39b89e7f6d62e00c1cf39d3ca5ca7f34c0d6ab350bace6ddb186c1c010506296878adb76dc09aec01b7f5b71280752061
SSDEEP

192:XW0PIPPlPPd2QXIchfJHKXJGwPHY68awkzai1enQmHhyezdN5+5+IUK/v:m0qReR5b7zKM+IUCv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdab0045e3b6ba4ea5dc3eb154389c44

Files

cdab0045e3b6ba4ea5dc3eb154389c44
.exe windows:4 windows x86 arch:x86

67f64dc42facb88ba12c7c0a92e5716b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
ExitProcess
GetModuleHandleA
GetCommandLineA
CreateEventA
GetProcAddress
lstrcatA
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
WaitForSingleObject
CloseHandle
SetFileAttributesW
WinExec
SetFileAttributesA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE