cdac9b8e941e3fa78826736ac54e79da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdac9b8e941e3fa78826736ac54e79da
Size

244KB
MD5

cdac9b8e941e3fa78826736ac54e79da
SHA1

ba2782cacd06b98bd9d42721c69c865bc269271c
SHA256

f843e6f9921af70d75cd3fcde2e1da0df7f7b23a09acea8b0629cf25e9585b2a
SHA512

24aea03b3353d8351a9f04b079e7b5e2d554f2f9a8ef017d8fa1a05dccc79b541d35b62ce18c09511b3c50b3ec3ab0a2884ee0f326ba82a58c74c9aec68a30f9
SSDEEP

3072:H6w+UCejNTYUFr83YfElg+hD9ORVO+XS6OUvVrUhJTWfxprG8iodP6Go1nEQ:H6PF3NfX8VOH6OSMJTif/9/oNEQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdac9b8e941e3fa78826736ac54e79da

Files

cdac9b8e941e3fa78826736ac54e79da
.exe windows:4 windows x86 arch:x86

d7c3c9382b43e5478a56ea7d42452cdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.scpack
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ