cb648742935e872f1bfd4483af6ccf14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb648742935e872f1bfd4483af6ccf14
Size

484KB
MD5

cb648742935e872f1bfd4483af6ccf14
SHA1

2e5614362db34094fb80ad73e0f3caa17618fdd9
SHA256

84d047cebc99496fda745b65611e017532c344aa1301a3e2f4c5abce0c1d84a1
SHA512

9446643fba48f6900e465b14c71ddea450b9a8b4886df9f0903a9ec8f0b6216ca2a18d0759abb491984432a49fa0a9007be2d45951970e5ada4ef20857dcbde9
SSDEEP

12288:x67gxNRx6NhaJAn8UlbDGcLaUtn9Lne+Ribkonm:tRx528Ulb5LVtL0bkom

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb648742935e872f1bfd4483af6ccf14

Files

cb648742935e872f1bfd4483af6ccf14
.exe windows:4 windows x86 arch:x86

aece18eb4e457ebba1bb8fe18258c1db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlAbsoluteToSelfRelativeSD
RtlSetThreadIsCritical

kernel32

GetSystemRegistryQuota
GetUserDefaultLCID
GetCurrentThread

user32

GetActiveWindow

Sections

.text
Size: 476KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE