cb6aa66efe13bccea5454321660259d0 | Triage

Sharing

General

Target

cb6aa66efe13bccea5454321660259d0
Size

41KB
MD5

cb6aa66efe13bccea5454321660259d0
SHA1

cc3584d484707d2b42a80367b9da493bf45809a5
SHA256

c2616e13df2c6c5cb9fc9c6fcf851d17902124c7af4cab234e15d3d81e830fd5
SHA512

3bb9528807d99a7294ee57e739f5e8ae9dff6759b9cf57a742accd332c2208d87c3fc7fc2f7f96a7507e939f7905f4bf5b192a3d257cf1e5eb05bf0697a4d726
SSDEEP

768:SSZegCdSoybGXtbSmonuKEMKGkm4VohSh2CVpSejf/PMlho24/z6QxQsKPD3V5ms:SSr84iSFuVBihSZjf/Elho24VxsDF5ms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb6aa66efe13bccea5454321660259d0

Files

cb6aa66efe13bccea5454321660259d0
.dll windows:4 windows x86 arch:x86

5019c676796ddcaa89073490dd7fdcd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapCreate
RaiseException
SetFilePointer
ExitProcess

msvcrt

wcscmp
_exit
exit
wcslen
wcscpy
swscanf
free

user32

ScreenToClient
GetMenu

oleaut32

OleTranslateColor
SafeArrayAllocDescriptor
OleLoadPicturePath
VarBstrCmp

shlwapi

SHEnumKeyExA
StrToIntA
SHDeleteValueA
PathBuildRootA

Sections

.text
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ