cd8e3d774e4160acf3d44df5a2337e80N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd8e3d774e4160acf3d44df5a2337e80N
Size

37KB
MD5

cd8e3d774e4160acf3d44df5a2337e80
SHA1

fbc8cd43a99a24f3f2432233c2e020b16c4d3879
SHA256

9064d840ed9d2e035781b2f8e5fa4398e986e64c01c02ed863ad31b837d7c686
SHA512

14aff0c03ec6111a16fc913e882d82322bc0f2e6cd66fcd80edc37c0c91f5e82a1ae882ea304b0ae69feae6739fb8795fbcaae99ba677fe06c5fbc3785276b31
SSDEEP

768:Jgp6P5IIp/G26xSDko2OdRNe7PbXjTYrt7/bqXLmVtcRn:Ji6P5II9GbxSAiaPbX+/nt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd8e3d774e4160acf3d44df5a2337e80N

Files

cd8e3d774e4160acf3d44df5a2337e80N
.dll windows:1 windows x86 arch:x86

fbfaa1a2fca33911d06b0d0c1cd94402

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
CreateFileW
DeleteFileW
FindResourceA
FreeResource
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
ReadFile
SizeofResource
Sleep
WideCharToMultiByte
WriteFile
lstrcatA
lstrcatW
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpyW
lstrlenA

user32

EnableWindow
FindWindowA
GetWindowLongA
SendMessageA
SendMessageW
wsprintfA

comdlg32

GetOpenFileNameW
GetSaveFileNameA

ntdll

memcpy
memset

ws2_32

WSAStartup
WSACleanup
socket
closesocket
gethostbyname
connect
send
recv
WSASocketA
WSAConnect
WSASend
WSACreateEvent
WSAWaitForMultipleEvents

shlwapi

PathStripPathA

Sections

.code
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ