cb0de5bf80e97f8cdb1d5e1b01102d5a9e633d5623545625f29e97fbeb8afd45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb0de5bf80e97f8cdb1d5e1b01102d5a9e633d5623545625f29e97fbeb8afd45
Size

5KB
MD5

413a42e928dab587a6c38e000713cbd3
SHA1

f2180fe7f08acb5c4832a4ee7b51bdb5cbb3ce09
SHA256

cb0de5bf80e97f8cdb1d5e1b01102d5a9e633d5623545625f29e97fbeb8afd45
SHA512

2ab24cba4901649cac9c80b9e1b5e584cc1907fbba8114c4d3fec0978812923f6147f21e42258cdcff72bac865e2e5a35b4abfa12298be0c7aee4f4d047c4f61
SSDEEP

96:+ltHlXIDqyP/gKUYUW9L9Ixo1AOyddoTreEBIGIoorMz:MlXjKHU7W9G2aOX/1orMz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb0de5bf80e97f8cdb1d5e1b01102d5a9e633d5623545625f29e97fbeb8afd45

Files

cb0de5bf80e97f8cdb1d5e1b01102d5a9e633d5623545625f29e97fbeb8afd45
.exe windows:4 windows x64

023252b3c9fa6817763a793a71642084

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsFree
SnmpUtilOidCpy
SnmpUtilVarBindCpy
SnmpUtilPrintOid
SnmpUtilPrintAsnAny
SnmpUtilMemFree
SnmpSvcGetUptime
SnmpUtilOidNCmp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ