cb45eb36aa84e1aad2242466be326439 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb45eb36aa84e1aad2242466be326439
Size

216KB
MD5

cb45eb36aa84e1aad2242466be326439
SHA1

897b748005e7e035fac6c6244387d60bd730b51f
SHA256

83833c6bfcef2da12f052d72e3308ead5c6b3a32adafe016e7b5d962423353c8
SHA512

1112692b603836e27cb21891c29ef9b599213a36522a087bad6143a47630531fe094ce082a84714fbd177d3bc1caff2727f0ae1c02490a11519a1eeacfc25b58
SSDEEP

3072:TWJbZyYpOgpevWmKtr2Pzl1ukjGtgnuVdUgpbppMV1QN775xG0ehuS65a:TuNUfKtr2CcmnNI1QNhxGF65

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb45eb36aa84e1aad2242466be326439

Files

cb45eb36aa84e1aad2242466be326439
.exe windows:4 windows x86 arch:x86

ddb72f65a38dfd88c12c491e699d798f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidCodePage
GetSystemWindowsDirectoryA
TermsrvAppInstallMode
GetFileAttributesA
GetDiskFreeSpaceA
VirtualAlloc
IsValidCodePage
HeapSize
HeapCreate
UpdateResourceA
SetFileAttributesA
_lwrite
GetDevicePowerState
GlobalFindAtomA
GetExitCodeProcess
SetPriorityClass
SetFilePointer
FileTimeToSystemTime
OpenJobObjectA
FileTimeToLocalFileTime
TerminateThread
ReleaseSemaphore
HeapFree
GetFileInformationByHandle
SetHandleInformation
HeapAlloc
GetCommandLineW

ws2_32

socket

Sections

.itext
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 176KB - Virtual size: 837KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ