cbad488b720492a0e643eab230954b1d | Triage

Sharing

General

Target

cbad488b720492a0e643eab230954b1d
Size

5KB
MD5

cbad488b720492a0e643eab230954b1d
SHA1

b14ac189678ef35bf88b34333c138009487e09e9
SHA256

e393ee86632f0d996cc270cd01ce5df044a049149519535fd5e2ac4c3f6d45c4
SHA512

d0994db9e76a7be9d273c820b75d3839e4e95fe0b728b7c43766cae5b85ce2241e7e5d881a70dabf5969a6a00df1a9af45d532cb69b721f52b26130a97e12b2b
SSDEEP

96:qinGV4s8T4FT0KLFgSCPSRA20WBhhyMuq8VkrgJ:PGWs352RBWBhhyMT8yrg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbad488b720492a0e643eab230954b1d

Files

cbad488b720492a0e643eab230954b1d
.exe windows:4 windows x86 arch:x86

3c4275979385c7f62196098711f6bdd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
CopyFileA
CreateFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
ReadFile
CloseHandle
SetFilePointer
WriteFile
lstrcatA
lstrcmpA
lstrcpyA

user32

GetForegroundWindow
CharUpperA

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE