cf1ca4300ca118ac1de3571da3bd10aa90a41c4a1baedc608f4b6a399530db1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf1ca4300ca118ac1de3571da3bd10aa90a41c4a1baedc608f4b6a399530db1e
Size

24KB
MD5

7c9a915dea338e8d1d21442d3ae2e094
SHA1

61f4f930ac26b577690c40a939e0634f0373849f
SHA256

cf1ca4300ca118ac1de3571da3bd10aa90a41c4a1baedc608f4b6a399530db1e
SHA512

5201326b350baad76622fd2ebab2fb8285d8797ac0b814e27931c8a85e5fd7b4513223d36e07adb74d046131eebb058d6a63dcecba312fc62fb9b7b174cd6c16
SSDEEP

48:bxj8MdS6OA3gZP6Rpoa2oy29w36MlShNg6+t2M2XsVmNXM/pFs9a6DnOBoJ:tzS6OjZWpgw9w36CAcV0cmNXmSaInD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf1ca4300ca118ac1de3571da3bd10aa90a41c4a1baedc608f4b6a399530db1e

Files

cf1ca4300ca118ac1de3571da3bd10aa90a41c4a1baedc608f4b6a399530db1e
.dll windows:4 windows x86 arch:x86

f229794f836e53ebeceda5e490d476cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord1253
ord342
ord1182
ord823
ord1168

msvcrt

_initterm
free
_onexit
__dllonexit
_ftol
malloc
_adjust_fdiv

kernel32

GetModuleHandleA
GetProcAddress
CreateThread
GetVersionExA
Sleep

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

Exports

Exports

DllGetCPUUsage

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 657B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ