cdbfa3f04a5dfa6d6ff51230f1e1e5f6 | Triage

Sharing

General

Target

cdbfa3f04a5dfa6d6ff51230f1e1e5f6
Size

99KB
MD5

cdbfa3f04a5dfa6d6ff51230f1e1e5f6
SHA1

539ebdc1b7fb9a7f61ca7c5d2e253c8e5561f453
SHA256

c1939ae5fddff90382b9522417c041821363fb08fc3852ad736ae186b3522f49
SHA512

8059dd0f134abee1bcb32489ededb5733161958c81580f4f6d61e2dfc55d8d09b8d3a44d5d0bf1f3c5fd7e464bdf7aaa1b786f8824f8144dfd13643858765974
SSDEEP

1536:JCP7JI8N4wVqOVuarvQsMJMYfymnUmoMku15M7GHUhpmE+MbVYOKj/:JI7qLwVdcJjUmeu167/Qme

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdbfa3f04a5dfa6d6ff51230f1e1e5f6

Files

cdbfa3f04a5dfa6d6ff51230f1e1e5f6
.exe windows:5 windows x86 arch:x86

55a8b5fbb279a3ed7adec954fd020659

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__mb_cur_max
??3@YAXPAX@Z
_controlfp
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
atoi
_adjust_fdiv
fopen
__wgetmainargs
strncmp
__winitenv

kernel32

GetVolumeInformationW
VirtualQuery
CreateThread
GetVersionExA
GetLocaleInfoA
GetFileAttributesW
GetCurrentThread
HeapSize
WaitForSingleObject
GetCommandLineA
LCMapStringW
CreateMutexA
GetCurrentProcess
LCMapStringA
VirtualProtect
GetThreadLocale
lstrcmpiA
OutputDebugStringA
SetFilePointer
GetStringTypeA
WriteFile
InitializeCriticalSection
GetModuleHandleW
CreateEventW

ntdll

NtWaitForMultipleObjects
NtQueryVirtualMemory
RtlAddAccessAllowedAce
_allrem
NtOpenSymbolicLinkObject
RtlSystemTimeToLocalTime
DbgBreakPoint

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ