cb1ed66915bff236bd93218863d05dda | Triage

Sharing

General

Target

cb1ed66915bff236bd93218863d05dda
Size

616KB
MD5

cb1ed66915bff236bd93218863d05dda
SHA1

203b5e01cd8e696971e817768bdbd0c4ea6dbebb
SHA256

d008c9e8f618b47e4808d729d9104dbbdd238351a58f4b6071eff47be8467323
SHA512

e6481682ce4cd185b6177516b80f78d2b1715eb79f33a37e724fad3ed6138e30f9fedbf6c33a25ddec4ec94e927aa6c368cfc05ba04fa1291841ce56bb987109
SSDEEP

12288:qso7xlyGjQVVHxAt8PySuBxoBvAdLGVSXh/O:qpxZ8kAvA6SRW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb1ed66915bff236bd93218863d05dda

Files

cb1ed66915bff236bd93218863d05dda
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Socket@Finalize
@@Socket@Finalize
@@Socket@Finalize
@@Socket@Initialize
@@Socket@Initialize
@@Socket@Initialize
_Form1
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 506KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ