cb8f9ba472b321a60151b2c189047f79 | Triage

Sharing

General

Target

cb8f9ba472b321a60151b2c189047f79
Size

98KB
MD5

cb8f9ba472b321a60151b2c189047f79
SHA1

f4e6af953cc91ead491bb9e5604169b7f9656347
SHA256

0447d91accb333a20d55c0d91f08c803a89ed90ea8c19b400832519663b2c4ad
SHA512

6ee655dae31e91037083b5835079778b372f5911715b30bc381300d44e2343b252890fb4d49ecdef20336e8cbc2e96d2756330d10d42171ffc3f77d57a4aa5b6
SSDEEP

3072:PdkdRgk5OSRxY2cAOfpahuFgoeZkeXn3akmEsm9+55D1A0Y:Vk79OSs2cx8ejI3aDEzo5G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb8f9ba472b321a60151b2c189047f79

Files

cb8f9ba472b321a60151b2c189047f79
.dll windows:4 windows x86 arch:x86

342e9dbaf86e88f4cdc1cff3f8d9fb99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

OemToCharBuffA
MessageBoxA
MessageBeep
LoadCursorFromFileA
LoadCursorA
EndPaint
EndDialog
EmptyClipboard
DrawTextA
DestroyCursor
CreateIconFromResourceEx
CreateDesktopA
CopyRect
CharToOemBuffA
CharNextA
ActivateKeyboardLayout

kernel32

lstrcmpiA
ReadFile
MapViewOfFile
InitializeCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleA
ExitProcess
EnumResourceTypesA
EnumResourceLanguagesA
CloseHandle

advapi32

RegQueryValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 54KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ