cb2af312635e9921e218913681e8aa6a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb2af312635e9921e218913681e8aa6a
Size

2.2MB
MD5

cb2af312635e9921e218913681e8aa6a
SHA1

a465751f595e1c0c12b23b610725f0500aab372e
SHA256

dd46153fbfee14c72f4c9c82ffc9153755ba4c44ed6415fafc7565ebb56eb684
SHA512

bb975734883b0609af62e74ff2c9ab06f8e1e3e8628efc68f3e1ccca0e3d69801da7e55c1e0f686bf74e1d179351f0622c65bae99fe5ccdc2137b9ae39d2d515
SSDEEP

49152:hCEfGEKc09HwJUr9vaGl9+eLbZP3XNe8n2NZ4Lt2I2:dfuN5wmJvd9+ehgoW4G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb2af312635e9921e218913681e8aa6a

Files

cb2af312635e9921e218913681e8aa6a
.exe windows:5 windows x86 arch:x86

491720e079c42a3bdde625c6f1d1d6e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\temp\my.pdb

Imports

kernel32

LoadLibraryA
GetProcAddress
Sleep
ExitProcess
GetModuleHandleA
lstrcatA
MultiByteToWideChar
lstrcmpiA
lstrlenA
GetTickCount

user32

SetMenu
wsprintfA
MessageBeep
GetDC
GetMenu

gdi32

SetDCBrushColor

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ