cda29600538301cf528bee944818d018 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cda29600538301cf528bee944818d018
Size

22KB
MD5

cda29600538301cf528bee944818d018
SHA1

e3d921f60a809052d10da72105e91927c4be6c9c
SHA256

8e02ce3d56bf3fe0b8b7f79d2e4a05f9c42517b574bd524fa89fbb226fc68f0e
SHA512

22516c83bcbf465f1489c3962703a36b5979c5266b4519aa61539d3464854408b562fc370eec977bb9a79de82b8414ae03c6ada0f4247587c1c971c5c31a8282
SSDEEP

384:GtZ2G4bgdi6oap+qAD2gJeW/ttlHDtJpxXzdk6Eegr2Q8KN5ZytTmmdIS+awxYM+:GtcG4bg5aPaWeW/9n5kYKPyjISU5REDF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cda29600538301cf528bee944818d018

Files

cda29600538301cf528bee944818d018
.exe windows:4 windows x86 arch:x86

20b378d2328f2e8658a11389b7821747

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
lstrcpyA
Sleep

oleaut32

SysFreeString
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA
RegSetValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

wininet

InternetGetConnectedState

Sections

.text
Size: 22KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE