cb5b4d871e20f6dcf6f6f46e7c324ad7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb5b4d871e20f6dcf6f6f46e7c324ad7
Size

190KB
MD5

cb5b4d871e20f6dcf6f6f46e7c324ad7
SHA1

6b40063c8676312628e8c9e32593f194c0d53bc4
SHA256

575bda9b2a816e45ca4118472e70c038f32f71f89bd2ad452797f0e6b1677b03
SHA512

7b8e21825eb53f083c7d3af815c75647b3d02e2f6b48d592d11206a554c2abd09125e8003cefc52480fcb50f3f0599103d4dbdfe01d222298f2f286c3fa8d92d
SSDEEP

3072:902c9xn5AF9byyTOA3xdfUgqfzew6LJuJ+aMSBfUfvbHYGUY3rN81fDkp:90dxnOFh4M4ZaJaM4Mfv8GW1fD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb5b4d871e20f6dcf6f6f46e7c324ad7

Files

cb5b4d871e20f6dcf6f6f46e7c324ad7
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 184KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE