cb640091434f103127ce322e29c74f0af4bd8900ce830d0e5a148dbcc81f1fb5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb640091434f103127ce322e29c74f0af4bd8900ce830d0e5a148dbcc81f1fb5
Size

1.4MB
MD5

a0e8b8e7b1bddb86a86d4e0a5434da6a
SHA1

6acb1c985ddf6bd0ce668adbd80060da858a655d
SHA256

cb640091434f103127ce322e29c74f0af4bd8900ce830d0e5a148dbcc81f1fb5
SHA512

a00b0c39fc3a01757577af818bd81792d506c7fa6d08897a12d8961457e5568e25745a50d765e6be293eb548968214f5af9f40627c339c4b10b50e59dc933dff
SSDEEP

24576:YH+kJjLnQKU8XwKpH/ec51mU/Xy2mYFXpXS1mBleuPfoXMwovg/o2FOvM:Y+kJjs9KpfecOU/FrXHPIXMwoog2N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb640091434f103127ce322e29c74f0af4bd8900ce830d0e5a148dbcc81f1fb5

Files

cb640091434f103127ce322e29c74f0af4bd8900ce830d0e5a148dbcc81f1fb5
.exe windows x86

dc6f6cf6f243f39589ba7085c299c229

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess

user32

LoadIconA

gdi32

ExtTextOutA

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

VariantClear

comctl32

ord17

ws2_32

inet_ntoa

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 464KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 988KB - Virtual size: 988KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ