cb86d139a5452ee5c6041f32b91722f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb86d139a5452ee5c6041f32b91722f9
Size

27KB
MD5

cb86d139a5452ee5c6041f32b91722f9
SHA1

4bf7c1cf0418cab6c42e1d0c1cd6ff5a2d3eda39
SHA256

6ee380f21e92e28a8070c1da133f88799706b2b773517547f88ed314770415e4
SHA512

4d938be514f8625c7e99b91827208da7e1636220bf1f19fdd433be2ed5c96eb8b92e4ed0e0ac2fc58ded987956356bf98719181a0b93d4fd5c03b3672e6e7dcb
SSDEEP

384:/F/k89izogsqL3Tdy3TjIQPHMsRtsMPPvLPZWPKrSKhmMsPnVmH/dnM:lkZzohqL3TdoXHMsHxPnLPxrQPcHVM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb86d139a5452ee5c6041f32b91722f9

Files

cb86d139a5452ee5c6041f32b91722f9
.exe windows:4 windows x86 arch:x86

1e1d46e3bf6a210f761f54a7abb04fc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetTickCount
GetLastError
lstrlenA

user32

wsprintfA

advapi32

OpenServiceA

ntdll

strncpy
memset
memcpy
strlen
strcpy
strcmp
_allmul
wcscmp
wcscpy
wcslen
strstr
RtlUnwind
NtQueryVirtualMemory

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yxlyzvp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE