cd92cacd76a8609637aa55b946519ffe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd92cacd76a8609637aa55b946519ffe
Size

63KB
MD5

cd92cacd76a8609637aa55b946519ffe
SHA1

21679481cdd8ef0851852daf57881841da7b6bc9
SHA256

33f2615ad3df0cbfd3ae938fe01b243091484c1c50ef5ea77c0e320ed81a62b8
SHA512

5ba61ac10750dcfcc04ab11b86e94da24fa6e2344c9193762d8086d3b88056d5b4738cf35b2559f3f5bf11975bf29efb448a9f49fc37a4689adff5775e46891f
SSDEEP

1536:fHlhlnovyvzBnvVujzCqbRVWuZlFQJqcHkH9l/Jg58:dhlnoIzDUzJRVtlOsNHHum

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd92cacd76a8609637aa55b946519ffe

Files

cd92cacd76a8609637aa55b946519ffe
.exe windows:4 windows x86 arch:x86

f2f186bd527fcb7dd2aec31e00476fcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseInitAppcompatCacheSupport
WaitForSingleObjectEx
K32EnumProcessModulesEx
GetStateFolder
GetProfileIntA
ExitProcess
WriteConsoleW
RegCreateKeyExA
SetFilePointerEx
GetProcessDefaultCpuSets

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE