cdd9e1903b4949a8a01169cbdb07086a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdd9e1903b4949a8a01169cbdb07086a
Size

40KB
MD5

cdd9e1903b4949a8a01169cbdb07086a
SHA1

050cbd24f625cfa439b9e1b6c3e860c38b1a294b
SHA256

da3935204f768c882f3085160cc3426c196724250720a9a5d9f02e176e4d717f
SHA512

a884c2e1fe13e1d6fca2d15763cd4da1d4fedbb1247aba5c09ff682e76bd078a0cc3168145932199d50f05217d8951031b57facee704ef1b620a39453b0fdc2d
SSDEEP

768:IN/zEhxS7aj2mciFwG3Iz2TBHVapF4qYcWlLL1TK42zW:YoQwndyG3IGJVapF4PlBK9W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdd9e1903b4949a8a01169cbdb07086a

Files

cdd9e1903b4949a8a01169cbdb07086a
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ