cb5f87ee86f697482bf439e2edfd29d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb5f87ee86f697482bf439e2edfd29d3
Size

4KB
MD5

cb5f87ee86f697482bf439e2edfd29d3
SHA1

6776c4ce423059848688fa67ddfc3c7d8b96c930
SHA256

43f73e679863afa1c13c71bf9f16f875beb58b86bdbc4a1900ea35f67e802cfa
SHA512

858f408abc505e9fb29c39165251bd68aceec47c4b0a853e508d83b2ac160fe1230bd07489b3a200f9634ed0d9b761a9dd5d0f6a9dbfcc5a1b6440170f70bea0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb5f87ee86f697482bf439e2edfd29d3

Files

cb5f87ee86f697482bf439e2edfd29d3
.exe windows:4 windows x86 arch:x86

d4bbd025c75941fa2084ce753fb31d17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW

ole32

CoTaskMemFree
CoInitialize
CoUninitialize

msvcrt

fclose
fwrite
fread
_wfopen
_exit
wcscat
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

kernel32

lstrcatW
GetFileAttributesW
MoveFileW
MoveFileExW
GetTempPathW
Sleep
LoadLibraryW
CreateDirectoryW
lstrcpyW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE