1cbbf440d7ab764f06edaa05320da0b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cbbf440d7ab764f06edaa05320da0b3
Size

133KB
MD5

1cbbf440d7ab764f06edaa05320da0b3
SHA1

b8b3880476b15eaadeeac7212f957bf39852679e
SHA256

6ae9a36caebf63b4532818e15c898ee1857ead9a0c137480a1810106d3e1d824
SHA512

7b602a652b13b6ef0ecd67233afafbef7a13610b4d6253ec13fcc5711658cc9d394d0d1542c09735f4d3824c1f7ca8ef8b225b80ac382cc617352e0b8749b671
SSDEEP

1536:jO7R8Gdcy3SMAwmWCFibAd9LWTfK3X/Gxedghf+74WqMlAAIVNw4WW+bX0QhUSR0:0jcyCD1dFAf2/DASsY5xZRZS0x5SIlS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cbbf440d7ab764f06edaa05320da0b3

Files

1cbbf440d7ab764f06edaa05320da0b3
.dll windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

api

Sections

.text
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ