cb55f4e7186690a76a1f7538144be7ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb55f4e7186690a76a1f7538144be7ca
Size

28KB
MD5

cb55f4e7186690a76a1f7538144be7ca
SHA1

4164f0d7eabee13a75d7497cd4f27221fd1a091a
SHA256

e6fdfa12c48263b705d93ecdaa151bd76df9be469a86d2e72c386cc645489902
SHA512

08ee900a4e135aefdd8b137b0488790c1f1d2859852968e08563a26b8e9ed19c3bdc1df531f01987ebe54c1dd0eb7ca56bdfa5d668e3984949090c7c1f75b249
SSDEEP

192:SuW+eVNxM0SY6pCM7040qu0rv6uhHDyimXvg4xkP:SKFCM7bOK6uhHDyimXvg4+P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb55f4e7186690a76a1f7538144be7ca

Files

cb55f4e7186690a76a1f7538144be7ca
.exe windows:4 windows x86 arch:x86

d3bd438dc05d89f886047fe7adfa8954

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingW
VirtualFree
GetModuleHandleA
SetLastError
VirtualProtect
LoadLibraryA
GetProcAddress
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
MapViewOfFileEx
UnmapViewOfFile
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

Sections

.text
Size: 24KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE