cb22f688164d5e1a7a00fcc72e4291ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb22f688164d5e1a7a00fcc72e4291ba
Size

105KB
MD5

cb22f688164d5e1a7a00fcc72e4291ba
SHA1

1239a058d3277b9999a361a1d67ce8df3e5e5084
SHA256

9f2ef3d23cef588a739f2e9010a31ff612f1b35dbdc13f09b78fe99eb06fa95a
SHA512

7ce76ad76fe3b6c9e11691ca7f5d22667610453213a7004045c0a546221693d5eeadb7465e66c20f13922bea5aad2b55c1a74fdf03cb1a266c6bff7d89b4c5c7
SSDEEP

3072:4x4rgihAVNZ7NdDtA2JuNJ9vuOfx+tb88tgbCG3:z9ctDhJGJpuqxYb88eCG3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb22f688164d5e1a7a00fcc72e4291ba

Files

cb22f688164d5e1a7a00fcc72e4291ba
.exe windows:4 windows x86 arch:x86

4d8e9e06f8e51550e3e5089179e9846d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA

Sections

.text
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MaskPE
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccg
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE