cpn[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cpn.exe
Size

4.2MB
MD5

849043665f04f31cf79375f112367a80
SHA1

b34a2b2150949b832caa75e2c61a8db20b276a85
SHA256

ce0eb748b7eb53978a108762f0ae5bd2e2bea94e4ed2977282337721a712a32c
SHA512

56e12a307a8f8f83f1f1b246f81c05d5acec22c36c7c0f056a56e9cea6000755bfb6fdebe61805d4a5ac8385c6205ad6bd14c7270af05b2106e7d5d17608bbfe
SSDEEP

98304:3KnZ6IElhOu0/r4z0Na9ykOhvh2k6i6Ro6954VvFd:3x9Kgz0I/svhqd6695+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cpn.exe

Files

cpn.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

cpn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ