cab6a29fbc49990b57eeb03572c3333b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cab6a29fbc49990b57eeb03572c3333b
Size

483KB
MD5

cab6a29fbc49990b57eeb03572c3333b
SHA1

8bc57c604f06aa105903cad401ced3f9144a1b2e
SHA256

d57a13d057400fc55680f089541de89bcd2d4ae1be82a99c211c33a9aeaade30
SHA512

6b8aca8d003d93f956fe88e4491822f217f7b5e0c661a56b48fa0b162f13ecce91d698cc02153edb709da4f6ce9514e069502436284997420949636ac732d5ee
SSDEEP

6144:eIFhuSYWFYgrKsUc3y2WnO1xzcWmZXe2rkwnbo60T21BOcCSrYDEgfje5ig1ef9U:jh8Mz+sv3y2N1xzAZprkmuN/SD5iKefy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cab6a29fbc49990b57eeb03572c3333b

Files

cab6a29fbc49990b57eeb03572c3333b
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 480KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jy
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ