cdda108300d8de9246e1de352415d025736102da42aedb295fd1503a530e3f03 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdda108300d8de9246e1de352415d025736102da42aedb295fd1503a530e3f03
Size

6.9MB
MD5

509638d13b40eb1efccfbf07930698ea
SHA1

ee599b05037066380b295fde14a54431a5defabb
SHA256

cdda108300d8de9246e1de352415d025736102da42aedb295fd1503a530e3f03
SHA512

3a51a70b1d7acb328d3f063dff01fd453edf857a6acbb29f6c449fe2416f6a9395be3fb2629d17a31b726e103d9072ed0dc8ccb4900f92cef3a84118f7ed568d
SSDEEP

196608:wxy5Dwni1mwBNUUMfLuzJiv3Flbo2p8K2ItXK+:2yFwHwBN7ILutw3/bo2v2ItXr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdda108300d8de9246e1de352415d025736102da42aedb295fd1503a530e3f03

Files

cdda108300d8de9246e1de352415d025736102da42aedb295fd1503a530e3f03
.exe windows:4 windows x86 arch:x86

2b6dab813f0c322f9aab13212e8c175d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile

user32

OpenClipboard

gdi32

SelectClipRgn

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

recvfrom

comdlg32

GetSaveFileNameA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 984KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ