CB[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CB.exe
Size

1.1MB
MD5

73f9f46fe85fcb3f1673f46e3361c32c
SHA1

8e198495883b44d33392ab1e67d04225b738bf14
SHA256

acf371459791f5eeaa2516076d30dd8d9e3c20ab3a7cd14acfbe3ab6874844a6
SHA512

5b3234d437922111fd852d9ae0303290bef9f267196e8f2a7c36cefda2e144392bbd9b79e205547642776f8091340931fc9926b14462fa8d7c0f149231d89861
SSDEEP

24576:DwLkEqnHmYEdTj9bahsYQ9zLRMKIRT4Wtn2zN8cXTVgTcgSG0dyd7:6kPhEdTj9VYAzlqEWtnp2TVw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CB.exe

Files

CB.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE