cb39269326798c3c3cdfb59e9cf9ae64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb39269326798c3c3cdfb59e9cf9ae64
Size

480KB
MD5

cb39269326798c3c3cdfb59e9cf9ae64
SHA1

d51ea635327559ad85f915b363a6791fa7da22d4
SHA256

968bf022c13936a87dc9876a92ffc76e5b2cc645973e10e5b8e8f2cb2aecaa26
SHA512

bcdd696d3ae87ba261f31bbfc27ba562ba247b067dfb3aa4b4146c8bdf18fe8bd83597b21deb327f000cac487aa323ff028165ae7ad8e3af219a296520992a14
SSDEEP

12288:WxXQF+vej8IsMAv7tALvsOZgvJzkm6zZZPnV:/8dMABSs1vRkm6nV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb39269326798c3c3cdfb59e9cf9ae64

Files

cb39269326798c3c3cdfb59e9cf9ae64
.exe windows:4 windows x86 arch:x86

5bf09efe34a0b02792d04a44d92cda3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
FreeUserPhysicalPages

user32

GetActiveWindow
GetShellWindow

Sections

.text
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 323B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE