cdd31056b8cc13e2ca726dc7d505dc05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdd31056b8cc13e2ca726dc7d505dc05
Size

146KB
MD5

cdd31056b8cc13e2ca726dc7d505dc05
SHA1

014604c423ad55c63d58e0b757518a94c776be60
SHA256

b1c1ccb063a80c5b9482db5a255e72d4ebd491183011e4d6c99fdea6b8a8948b
SHA512

8a62946c578e6079d9b3aa4be7a3b94ce860f90030ccc35da8ba3f5c686661fcc6be394fc30100d83c2f8c2e866bb5edf576b5128ec78f54f99ba8bf40cfce23
SSDEEP

3072:IX5e4dWmgXtLyEWeQ7MGlqRwmvAgM4kx6A6ljft1gveizp3nklcsE3mL:MqmgdloZRmGAA6ljSeizpXnsEWL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdd31056b8cc13e2ca726dc7d505dc05

Files

cdd31056b8cc13e2ca726dc7d505dc05
.exe windows:4 windows x86 arch:x86

9784071ee5e320956833aa365debc1db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
FlushFileBuffers
GetCommandLineA
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
lstrcpyA

advapi32

OpenSCManagerW

ole32

CoFileTimeNow
CoGetMalloc
IsEqualGUID
IsValidIid
IsValidPtrIn

setupapi

SetupScanFileQueueA

olepro32

OleCreatePictureIndirect
OleCreatePropertyFrameIndirect
OleIconToCursor
OleTranslateColor

user32

VkKeyScanExA
RegisterDeviceNotificationW

Sections

.text
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE