cdd55ab0f73010a8a342b4cd7002272924ab6246363dd2f0e17124c2209cdaf6

Sharing

Copy URL Twitter E-mail

General

Target
cdd55ab0f73010a8a342b4cd7002272924ab6246363dd2f0e17124c2209cdaf6
Size 128KB
Sample260903-vft7vscl2x
SHA256 cdd55ab0f73010a8a342b4cd7002272924ab6246363dd2f0e17124c2209cdaf6
MD5 4e79ad0d11c59bb44c1b2c12af566418
SHA1 ba269083f15302f5fcfc6b3596d230f45eba1c97
SHA512 16cb3b21e60e2603c6b87593a63c718a244c4a70e252e3e46ceaafb1618a286db7959fde658a5f8d8ed6a291d85abd96e635b1e1aa811c81cf1b5188de84cbb0
SSDEEP 3072:84b2LkdzdRdWkmE8edd+U1kVhWFzfWIKtE26TIv:84b2L0CitatEBTI
TLSH
T12AD35C6A3775C523E9B9C532C4972E6C26716E160B305BEB80BA20740DE37C0FE7975A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdd55ab0f73010a8a342b4cd7002272924ab6246363dd2f0e17124c2209cdaf6

File Explorer

cdd55ab0f73010a8a342b4cd7002272924ab6246363dd2f0e17124c2209cdaf6

.exe 128KB

cdd55ab0f73010a8a342b4cd7002272924ab6246363dd2f0e17124c2209cdaf6

IMPHASH f3b1a06d416769f3a4945c010f1be3ac
SHA256 cdd55ab0f73010a8a342b4cd7002272924ab6246363dd2f0e17124c2209cdaf6
MD5 4e79ad0d11c59bb44c1b2c12af566418
SHA1 ba269083f15302f5fcfc6b3596d230f45eba1c97
SHA512 16cb3b21e60e2603c6b87593a63c718a244c4a70e252e3e46ceaafb1618a286db7959fde658a5f8d8ed6a291d85abd96e635b1e1aa811c81cf1b5188de84cbb0
SSDEEP 3072:84b2LkdzdRdWkmE8edd+U1kVhWFzfWIKtE26TIv:84b2L0CitatEBTI
TLSH
T12AD35C6A3775C523E9B9C532C4972E6C26716E160B305BEB80BA20740DE37C0FE7975A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

988B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/43

Size

68KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/18

Size

4KB

Virtual Size

640B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/32

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

cdd55ab0f73010a8a342b4cd7002272924ab6246363dd2f0e17124c2209cdaf6

ole32

oleaut32

user32

comctl32

ucrtbase

kernel32

ntdll

generic