cdf5b9e00310cb2dda807a56075fb7ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdf5b9e00310cb2dda807a56075fb7ef
Size

168KB
MD5

cdf5b9e00310cb2dda807a56075fb7ef
SHA1

36962d1171c3f4bd3f75fdeb9f4c5c3bad00218f
SHA256

c01d3be6f0c5bbda04e1c4956de3d15f917853950b0e0474b0076df5f604bfed
SHA512

3a349149c0e83cd35417b79a958f2939f1d584ab2bafff562022803f8df9d20896724f4636cb036a6ab144bac71cdca96bfd2d74e7f3685889c487b1a9a0d4ac
SSDEEP

3072:Q+jXSFRwGmjeGHARpY9o0ipb2LUIMfpRf7kd3C0RZp5J+fNdZVmFPqs8Fg:ORwI+Spl0iR2LUP17mS0R0NdZVaPqs8i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdf5b9e00310cb2dda807a56075fb7ef

Files

cdf5b9e00310cb2dda807a56075fb7ef
.exe windows:4 windows x86 arch:x86

d77efbf64b31ace5258b3bda0d5e5af2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
CloseHandle
CreateFileA
LoadLibraryA
LCMapStringA

user32

CharLowerBuffA
CloseWindow
CreateWindowExA
wsprintfA
SetWindowLongA

advapi32

RegDeleteValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumValueA
RegSetValueA
RegEnumKeyA
RegCreateKeyA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ