cbadae74ad457633dd62c5178b5a5b74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbadae74ad457633dd62c5178b5a5b74
Size

580KB
MD5

cbadae74ad457633dd62c5178b5a5b74
SHA1

b430cf1023c05fd3d5097ad784bdc635feb2fd95
SHA256

05b0636f22c0a6b5d8e3a8e615ba32cdcf24a77f310965b433cf20308ab30a81
SHA512

df1359933cfb5cdd40d531f933b1cb3f03e584762a612a8c47844aa782aa82ccc5c4bd4d7b785b495fed24f1b2f3363214fd33f73eb61bd22c7204014cd4bc32
SSDEEP

12288:/m5CPWxAGIt0lg65vOcvGglm6YCKGan2pjBFGPFaCI+o0swnJSrrA3Sw:np6yazJoyGtg0swJ1C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbadae74ad457633dd62c5178b5a5b74

Files

cbadae74ad457633dd62c5178b5a5b74
.exe windows:4 windows x86 arch:x86

e4a001eabda4a316c76fa3d99ed1234d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

comdlg32

GetOpenFileNameA

netapi32

Netbios

shlwapi

SHAutoComplete

winmm

PlaySoundA

Sections

CODE
Size: 545KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE