cb610a997004e6191826f4a0de3f41cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb610a997004e6191826f4a0de3f41cc
Size

24KB
MD5

cb610a997004e6191826f4a0de3f41cc
SHA1

42a6906e2b957d1b80ba7b854e50b7ab2d8b494c
SHA256

d2991036adb51cd86f7c8ea4b56f1a9b61a79ee38e6b239158ef396f06be120e
SHA512

d11346de02a655b9a1ce5ab96f6d7602b12c2d5d0447f452c4c2662477d8e1be05ea86ed030ec0ccd520d4e433a776fbafa39ad67169a09893cf5a41c955eb81
SSDEEP

384:3ZGPgyXR105FHXpDb77TScZo4Sib8mLqHVF:3o50NJ/PJEr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb610a997004e6191826f4a0de3f41cc

Files

cb610a997004e6191826f4a0de3f41cc
.exe windows:4 windows x86 arch:x86

65bff1578df5a6ee7187d692930bf1e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsGetValue
GetModuleHandleA
SetEnvironmentVariableA

user32

CreateAcceleratorTableW

gdi32

CombineTransform
GetMapMode
DeleteObject

msvcrt

_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE