cb490395295aab2de5f5bdeeb200da8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb490395295aab2de5f5bdeeb200da8e
Size

168KB
MD5

cb490395295aab2de5f5bdeeb200da8e
SHA1

1d00510a9434f43e0536f072e89d6026eb76d1e5
SHA256

0df0e1a923c938668e7e79d41a92d2c89d89bce2a881e42af6a538bf56e91be3
SHA512

29cae4013c4d0f193bae9edacf7d4499c6be9a950fb4634bc477626d798dba0d3c6221a2158d3dc8496f1f11f2e40f4d59e58db2cf83098a9f64c9e83bda5a2d
SSDEEP

3072:LWjkQeCcjwCbvPBbGGYr5PUWq2AEURFsS1W0SPjBEBK8zIQYinQE0z:ZQUFbhbGGYdPt+EUAS8JPj6jfA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb490395295aab2de5f5bdeeb200da8e

Files

cb490395295aab2de5f5bdeeb200da8e
.exe windows:4 windows x86 arch:x86

f6e9f842ad3d764ea0e45106a86af42c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

.text
Size: 22KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE