cab9680451612dfc63ce2a00462c946e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cab9680451612dfc63ce2a00462c946e
Size

464KB
MD5

cab9680451612dfc63ce2a00462c946e
SHA1

672ad8786c59b90d93ef24aa23fed22eccfc9391
SHA256

48b0f9f81c45a7d9d240985a9acd472ba16e21ad76910784b15e8aee93e12861
SHA512

38614cdb6826670e99376565ff8a2db3a15f25c6d648fccf270481ad3431bd96d0d245e2f90a32793ebf347def5b568d4adece1e00cfc618cd1cdf4cb3458515
SSDEEP

12288:uqUxrVcE3GGtL0HjbShp2eAaQ6L8np41e+YipJR:cVBJ0DbS32nQiVaTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cab9680451612dfc63ce2a00462c946e

Files

cab9680451612dfc63ce2a00462c946e
.exe windows:4 windows x86 arch:x86

061340bf3b413a84bb71204e91e18b3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnhandledExceptionFilter

oleaut32

VarDateFromBool

kernel32

GetCurrentProcess
OpenEventA
GetCurrentProcessId

user32

GetDoubleClickTime

Sections

.text
Size: 461KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 287B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE