cafbfc6d41269cd87d92a26cbe6a4b92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cafbfc6d41269cd87d92a26cbe6a4b92
Size

36KB
MD5

cafbfc6d41269cd87d92a26cbe6a4b92
SHA1

663dc4704b9eae89cdad30405c0c7c38e36deaf5
SHA256

76ff9f3f8306e0f7d414d6402e47154cf0dce7009ca3b4638460df175dfa5c99
SHA512

f130fc3a7cc161400b704806ae863f314d067623170c3941e4f357264a01fd628237d093664bbacf53320a8924291a4dd267df13232bb8e2b0c370fdc9c25288
SSDEEP

768:BYR0EnaaQDjsdYiYn/SYGLPXOxgFQljRepEF4HRpEbvio:SVeDjnZ/SYGLPXOxgF6jRwHw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cafbfc6d41269cd87d92a26cbe6a4b92

Files

cafbfc6d41269cd87d92a26cbe6a4b92
.exe windows:5 windows x86 arch:x86

2078bc482fc61dda3261cc7caf0cf7a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

snmpapi

SnmpUtilMemAlloc
SnmpUtilMemFree

wsock32

htonl
ioctlsocket
inet_addr
gethostbyname
ord1100
ord1101
WSAStartup

kernel32

LocalFree
GetVersion
FormatMessageA
GetLastError
CloseHandle
GetProcAddress
LoadLibraryA
GetVersionExA
DeviceIoControl

msvcrt

fprintf
toupper
atoi
_stricmp
_strupr
printf
exit
sprintf
_ultoa
qsort
free
malloc
strncpy
calloc
time
__p__iob
_setmode
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

advapi32

RegEnumValueA
RegSetValueExA
RegDeleteValueA
RegOpenKeyA

user32

CharToOemA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE