cabron[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cabron.exe
Size

298.5MB
MD5

6179c25551834ebe28cb9d5f78178f7d
SHA1

001a92ba60626aba9f6002235b8021f46823250a
SHA256

3b4a77f1b19e5412fa7bd8efbb8834cbfb3df73317373a427d5611d1046e711a
SHA512

33cc94889be4cc4f33e207fcbcf731069a37852c0bdce31998fcdc77160d0e7acff52fb50d7b63f96435f80b887e7f0afb810a9910a918c0e1b069a583a2890b
SSDEEP

12288:DuJKbYlsxvNZS+Ie2cLjsh72K7yuQZbGyS:DuJYQHlepY2GyhS

Score

N/A

Malware Config

Signatures

Files

cabron.exe
.exe windows x86

e7ba38693fd80b98ce6745c461019f8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualAlloc
GetModuleHandleW
GetProcAddress
LoadResource
SizeofResource
LoadLibraryA
FindResourceA
GetModuleHandleExW
GetLocaleInfoEx
LCIDToLocaleName
FreeLibrary
GetThreadTimes
InitializeSListHead
GetCurrentProcessId
TerminateProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
ResetEvent
SetEvent
LCMapStringW
GetSystemTimeAsFileTime
TlsFree
CreateEventW
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
MultiByteToWideChar
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
Sleep
WaitForSingleObjectEx
CloseHandle
QueryPerformanceCounter
WideCharToMultiByte

msvcrt

_acmdln
?_set_new_mode@@YAHH@Z
_isatty
_fileno
__set_app_type
_XcptFilter
_msize
__getmainargs
?terminate@@YAXXZ
realloc
_iob
___lc_handle_func
_unlock
_lock
strcpy_s
_controlfp_s
__p__commode
_set_fmode
_initterm_e
_initterm
_callnewh
_ismbblead
calloc
__strncnt
ungetc
setvbuf
_fseeki64
fsetpos
fgetpos
fgetc
fflush
fclose
_errno
abort
malloc
islower
___lc_codepage_func
_wcsdup
isupper
__pctype_func
rand
free
_amsg_exit
_except_handler4_common
__uncaught_exception
memset
memcpy
__CxxFrameHandler3
_CxxThrowException
strchr
wcsrchr
memmove

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 594KB - Virtual size: 594KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7ba38693fd80b98ce6745c461019f8d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 70KB - Virtual size: 69KB

.data Size: 2KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 2KB

.gfids Size: 512B - Virtual size: 456B

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 594KB - Virtual size: 594KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 70KB - Virtual size: 69KB

.data
Size: 2KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 2KB

.gfids
Size: 512B - Virtual size: 456B

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 594KB - Virtual size: 594KB

.reloc
Size: 5KB - Virtual size: 4KB