cb49adc7237d2faf8fd9485ec3c385ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb49adc7237d2faf8fd9485ec3c385ff
Size

250KB
MD5

cb49adc7237d2faf8fd9485ec3c385ff
SHA1

0865d05db89826bb915ed7e8e3d6e1da3d57b0fe
SHA256

41176e86575a189f048d1c5a47e91404b672ed8099bbe90649dbb34037a66467
SHA512

c1a539ecc5a18551b08fe0e20c525f9545b2db0fb4b0399ff59e4c4ad65148c52b47e51b352c02668b8603c34d06115532d193b709830c943ec8b79f7b02a973
SSDEEP

6144:fpdTEuUmAMGIqPVNu1NOxcilAGlYNuTewcoNDy84QS:zT7UMGIqdAoc2xHRHNDyDQS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb49adc7237d2faf8fd9485ec3c385ff

Files

cb49adc7237d2faf8fd9485ec3c385ff
.exe windows:4 windows x86 arch:x86

7b0e6fc5d948fe68a99e5beb8d65a3c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

shell32

ShellExecuteA

Sections

CODE
Size: 88KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE