cb0ced813b8a33f5ada8eaaa21c2acc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb0ced813b8a33f5ada8eaaa21c2acc9
Size

512KB
MD5

cb0ced813b8a33f5ada8eaaa21c2acc9
SHA1

7de921f1eefd2731396e7eae961c78a394de9329
SHA256

32d9baa711418927589ee0256d812cb75abb624789bfb20cccb7c68151863a2c
SHA512

43afe017deea12987b99acb468119791454f6996c34b44fc30667ce0892311d6f9ce53566e8872d4f67fd7896c0451fca5f1d5a7a507733b7ac0fdca4774f4aa
SSDEEP

12288:s7lCv0PvB2M30COu0Dy+/glo9EbiAtY0bQGGdg:AlXB2vV4C2biAtHbxcg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb0ced813b8a33f5ada8eaaa21c2acc9

Files

cb0ced813b8a33f5ada8eaaa21c2acc9
.dll windows:4 windows x86 arch:x86

c5c5840790d35b8b6337af1161e85e7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterWindowMessageW
SetCursor
GetScrollInfo
GetDC
IsWindowEnabled

kernel32

QueryPerformanceCounter
GetThreadLocale
InitializeCriticalSection
LCMapStringA
GetStartupInfoA
VirtualProtect
EnterCriticalSection
CreateThread
DisableThreadLibraryCalls
GetEnvironmentStrings
VirtualAlloc
LeaveCriticalSection
GetSystemTimeAsFileTime
SleepEx
GetCurrentProcessId
SetHandleCount
GetSystemInfo
GetCommandLineA
SetFileAttributesW
SetLastError
ExitProcess

ole32

CoInitializeEx

gdi32

CreateCompatibleBitmap

msvcrt

malloc
?terminate@@YAXXZ

Sections

.text
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ