cb35fc48d067c8459579140082199b48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb35fc48d067c8459579140082199b48
Size

58KB
MD5

cb35fc48d067c8459579140082199b48
SHA1

762acfeaec1149076995f3a6824cdf0a70f1a178
SHA256

686d45d9b278bc3fb9607bd0a251cb68a28404073029874883460c45369856ae
SHA512

27f12b6acf33a1424e2d8521dc8a379cd56b0c61986a11bcb009341681ab33bd88ce4382dff83e503ddedcaf9b02e725f29f4541e8fc55fec8aa0497cf81cb4a
SSDEEP

1536:0pTpArRAMPTeLoRj1th/vWD7MlclW8cCG5Rv+gqfZ4ytbz:0otpP2oJJ/eDAKJG5RWgqfZ4yt3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb35fc48d067c8459579140082199b48

Files

cb35fc48d067c8459579140082199b48
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE