cdb03ed6b5b2e069e8392024377008c8 | Triage

Sharing

General

Target

cdb03ed6b5b2e069e8392024377008c8
Size

28KB
MD5

cdb03ed6b5b2e069e8392024377008c8
SHA1

9b77e5d2dfc5c689fbbeccc760f472984393c920
SHA256

a32278abb503e2230b0d6653e2239ddc25be6c90fb9642b1a37351ff783acfb4
SHA512

681e9b413cd016241e30a4bc2dc4c87a91d1abf5ac606a2c759baa9620abcc81448cfc6f237d580db6a20819c102659950aee9526f52a08af03160918e72e37d
SSDEEP

192:0JJsdMQf8kIi1oynvZlICPavcNZu3+gk50X+o2b2du5kyXENktMO:5TSi16CPa0uky+o2yddyUNkt1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdb03ed6b5b2e069e8392024377008c8

Files

cdb03ed6b5b2e069e8392024377008c8
.exe windows:4 windows x86 arch:x86

33bf226a6afed93138bf538a40e73a6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
LCMapStringW
HeapAlloc
GetEnvironmentVariableA
SetMailslotInfo
GetModuleHandleA
GetStartupInfoA

user32

GetQueueStatus
LoadBitmapA

ole32

CoInitialize

msvcrt

_adjust_fdiv
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE