cb0d0d7355b3991686139c802091de46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb0d0d7355b3991686139c802091de46
Size

87KB
MD5

cb0d0d7355b3991686139c802091de46
SHA1

1a8f15e8840ddeff9a3ac0593f22c071f18d405a
SHA256

3908818bf50a4ebde39cbf93a8cad9b29104d1824b28f4d07108612964adcb22
SHA512

69441016558136780813f7095fbe83a36b6b637169a60e8375a693eacbd70d276a0f1420f84d2749c14f3f05e07e352b63e90c61260e015966def83bd12f0253
SSDEEP

1536:1y9DmbZtruQ/+FX6++YOgusO5CG/7nZBjhZ2W7zBHe/jnkdMa9BqpmOxwP33gG:ISbvDGFKeGCADZ2AoyMaqG/wG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb0d0d7355b3991686139c802091de46

Files

cb0d0d7355b3991686139c802091de46
.exe windows:1 windows x86 arch:x86

c4cf3165e02451aeeca3ad188c937843

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__getmainargs
_initterm
_except_handler3
_exit
_XcptFilter
_controlfp
__set_app_type
memcpy
__setusermatherr
exit
_acmdln
_adjust_fdiv
__p__fmode

gdi32

RestoreDC
CreateRectRgn
CreateCompatibleBitmap

kernel32

GetStartupInfoA
GetModuleHandleA
VirtualAlloc
VirtualFree

user32

GetCursorPos
SetCapture
GetClientRect
CreateWindowExA
EndPaint
LoadCursorW
GetPropA
SetWindowPlacement
GetDC
ChildWindowFromPoint
RedrawWindow
DrawIconEx
CreateIconIndirect
GetClassNameA
LoadCursorA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ