c0dd5bd76448d2917b5533ac7e28b55cf433a0d569f669ec629b8bcac1b175c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0dd5bd76448d2917b5533ac7e28b55cf433a0d569f669ec629b8bcac1b175c2
Size

26KB
MD5

81db1d134863fe136c885d179810ab7f
SHA1

08daf0cc6ccf9bcd8c0504de506afc43623cda1a
SHA256

c0dd5bd76448d2917b5533ac7e28b55cf433a0d569f669ec629b8bcac1b175c2
SHA512

587b47f42d6625820d0c0a453dc33f33a83b3d5dd751c63110f69eccfd4ff2e52469395c167ab7dddfad73bd3536d5260a294c758d1aa5d0819c09050cbde576
SSDEEP

384:GGjw95yGiZqhpTUohIo/U4nllHQCh1I6VP:GGGyDqhpJ+o/U4nXQQ1X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0dd5bd76448d2917b5533ac7e28b55cf433a0d569f669ec629b8bcac1b175c2

Files

c0dd5bd76448d2917b5533ac7e28b55cf433a0d569f669ec629b8bcac1b175c2
.exe windows:4 windows x86 arch:x86

f8d8aee08196483a265bcf1e1242daab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
GetWindowRect

kernel32

GetStartupInfoA
GetModuleFileNameA
CloseHandle
GetModuleHandleA
LoadLibraryA
HeapAlloc
GetProcessHeap

gdi32

GetTextExtentPoint32W
SelectObject
TextOutW

comdlg32

GetSaveFileNameW
GetFileTitleW

comctl32

ord17

ole32

CoTaskMemFree
CoTaskMemAlloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ