cb32f906d4748022c596d42ea5430b15 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb32f906d4748022c596d42ea5430b15
Size

1.4MB
MD5

cb32f906d4748022c596d42ea5430b15
SHA1

ca01af4e4c0aba776cf73300ed924ced5975ec39
SHA256

2eb92383b0b5d20bdbac71741452043dc840322ab5f3e67a411e0143e3107ab1
SHA512

b7111b4f00dced35ff9b4bed7c1e8984a01d589c1446dc9e2e98f4b7d0911f1ffeb638d361abdbe1acd63578175d4151154bb5df3d22a405223cd2f9ee3d0913
SSDEEP

24576:EiQ6cyglfyc4SfFHL2+H8HWaznIQmycMcaRVL2okh6K/+YPKyj7dT+qn4P+0Z+Kv:EPy6KaBbc2abIHj2vL2dP2YP9/dKqm7v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb32f906d4748022c596d42ea5430b15

Files

cb32f906d4748022c596d42ea5430b15
.exe windows:4 windows x86 arch:x86

496a714a01474dd92f9c76fa0a1a6991

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetGetConnectedState

urlmon

CoInternetCreateZoneManager

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 1.4MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE