cd30e5bb833ecaa2187c3c1802e7d410N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd30e5bb833ecaa2187c3c1802e7d410N.exe
Size

112KB
MD5

cd30e5bb833ecaa2187c3c1802e7d410
SHA1

a86536e065101e378d85c9835e22d169395594fb
SHA256

eadbf72608537b28e1c88e25282c12e8fda63125e639a11f9ebc3aeebcf92d6b
SHA512

aac0ee7a3057a0c4ea309e39a6d30260a98958df3b8e8e75acb8ff84baf4a6f06ec804401295a31f44e6faf297828cf3ef475b9180405a2f676feb31a20b3e7d
SSDEEP

1536:aNKgfwPKA7X8GZ6T8QknwbOqePdIwrQ/syOU74bEd98BKhD67Mxk6wNc:EGKSX9Qknwi9P6w0/HOfq98+DC6kFN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd30e5bb833ecaa2187c3c1802e7d410N.exe

Files

cd30e5bb833ecaa2187c3c1802e7d410N.exe
.exe windows:4 windows x86 arch:x86

5f35d20dbdc51939396c3481845dbb81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetCurrentThreadId
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE