cb779ad12db6d954488e8ab6a8d70dcf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb779ad12db6d954488e8ab6a8d70dcf
Size

603KB
MD5

cb779ad12db6d954488e8ab6a8d70dcf
SHA1

272b93b99a248f0a0b2d579f6338129099e8f2e4
SHA256

adce5a678fb8afc45032376781f27feb87a99e99788fd4bc1041bcd0d96b053c
SHA512

4aab37c73ee0dfb79fe0c59c17cf601e7a4bdd40aac52d86d50893ded510a9d5afd880d1dad74a3a8115c335df3fe0afdcf28388c5d56696fd9b8861a0662e8d
SSDEEP

6144:Ob2HnveeTMmk+5Ky1O1/3baIJ+Qh0OXx53q9:GknsF+511O1/baIJ+Qh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb779ad12db6d954488e8ab6a8d70dcf

Files

cb779ad12db6d954488e8ab6a8d70dcf
.dll windows:5 windows x86 arch:x86

6c8408bb5d7d5a5b75b9314f94e68763

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

COMRes.pdb

Imports

kernel32

DisableThreadLibraryCalls

Exports

Exports

COMResModuleInstance

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 599KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.upx_
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE