cab557b61fca246c1306dea4af45397f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cab557b61fca246c1306dea4af45397f
Size

2KB
MD5

cab557b61fca246c1306dea4af45397f
SHA1

102a867cc21c8d0bab958d522d879418e802fb9a
SHA256

a9b99bb44e01af45034476ccace4c2edfe40bec272c20f117935126d7430facf
SHA512

457bfd0941cccda439a84d6519ae1832eaa2a02661d7f60fc661042225be3e0c51ba6656f298cc7fadb04aaf065ff3d83b46f89928aaa9731eda4e83254db009

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cab557b61fca246c1306dea4af45397f

Files

cab557b61fca246c1306dea4af45397f
.exe windows:4 windows x86 arch:x86

f1b886ac1fc2ed4caecd32c0ce4564c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetModuleFileNameA
MoveFileExA

advapi32

RegCreateKeyA
RegSetValueExA

Sections

.text
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ