cdd66901e17bd5b8d747ac59e4b236bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdd66901e17bd5b8d747ac59e4b236bc
Size

20KB
MD5

cdd66901e17bd5b8d747ac59e4b236bc
SHA1

04542e1fd2501953603e64448147aa123d446a0c
SHA256

5500d10ec0a68a4a8d7f4549c95175e682f7753e3391519a0be8a630b16ae8d8
SHA512

08b8b0adcb5916b367e9ffd7dd2431ea82fb8cfe63a82db30b59dc70074716d24f40c1d0902f4f247823c71d8bc70d11c19cc9caf420c834cf19b1dadd393356
SSDEEP

192:2BiW+QBu1lKNT7hmRiSrhNvoYlbFffx7Sg9NtBqz5KZIhRg+dL+sw3qzr04:hQglKNHU4cvo+Nf1SctBqIB+dz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdd66901e17bd5b8d747ac59e4b236bc

Files

cdd66901e17bd5b8d747ac59e4b236bc
.exe windows:4 windows x86 arch:x86

3f0677bc6e2d52e58b71b10dbc1f29d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetModuleHandleA
ReadFile
SetFilePointer
GetModuleFileNameA
lstrcpyA
lstrcatA
GetTempPathA
LoadResource
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CopyFileA
GetCurrentThreadId
MapViewOfFile
Sleep
GetLastError
CreateMutexA
LockResource
SizeofResource
SetFileAttributesA
CreateFileA
WriteFile
CloseHandle

user32

GetMessageA

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ