CB[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CB.exe
Size

1.1MB
MD5

f14ced89d7cc9ad0b607f449b30c15c7
SHA1

5284b87cbd4351dff8762af37b8312475a6c52f5
SHA256

9f4051e4f51e935bf134fc1a25c0552f1ea385403a49a284e9990c438942f4c1
SHA512

ae93d3b36a984667f9514fe72a58cfdbee48da5daf6de6c07251d0d394aa6a8bb53507baad01d95a5b8c9fc973b765b530068b9f5e657b1f1060ec19e77c1530
SSDEEP

24576:ltoWvVFTygJ8ob6jrB1VF01D+tgdkqFM2v2dMp8VIzveA3uUs:l59xPdEjF8D4N0r2Y8eDO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CB.exe

Files

CB.exe
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE