cb1e16187a9f502d0dc1708d8709d9a7 | Triage

Sharing

General

Target

cb1e16187a9f502d0dc1708d8709d9a7
Size

22KB
MD5

cb1e16187a9f502d0dc1708d8709d9a7
SHA1

5dea9a4c0c48b86ed796df0bb0665a2833d86497
SHA256

0987520da34dea85ac909d8301e01ab8a71d538138ae4779830ea93d4bfaea32
SHA512

141ccc501d0047c27e4dd29beb1908b2b10ac7ff524fecb5fd57c6867abc127ffc83861ee42f4ac1598fa80e5e68440b0e1ba83864aa46f8986c650722de1622
SSDEEP

384:6Ih83DQGBmqeQft0cLeyncYocafiB7IM0I4w3dSt8cKQMZE9EgjaYWfxlOW:6GOQGBmhQft0WVcYoc58M0+NSfKFq38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb1e16187a9f502d0dc1708d8709d9a7

Files

cb1e16187a9f502d0dc1708d8709d9a7
.exe windows:5 windows x86 arch:x86

a38559a190af6a26eaae81d10d233faf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

rand
wcschr
strcmp
wcsstr
strrchr
_beginthread
wcscmp
__setusermatherr
_wcsnicmp
_strtime
fseek
strcat
_splitpath
_wctime
free
_vsnwprintf
bsearch
_acmdln
__p__commode
wcsncmp
memcmp
fclose
_controlfp
strtoul

kernel32

GetModuleHandleA
GetLastError
GetCurrentThreadId
GetVersion
GetTickCount
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetSystemTimeAsFileTime
GetCommandLineA
SetConsoleActiveScreenBuffer
WriteProfileStringW
CreateProcessA
GetConsoleCommandHistoryA
GetTempFileNameW
FlushInstructionCache
lstrcpyW
EnumDateFormatsExA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE