cbb287e5803aa195af0352bb88218baf | Triage

Sharing

General

Target

cbb287e5803aa195af0352bb88218baf
Size

116KB
MD5

cbb287e5803aa195af0352bb88218baf
SHA1

d0cb9897a2cd66f81997baaee0c7babf363376c2
SHA256

0d6a83ceda103cbb0b9c63e4765770cd743541fd329bc06782c92cf7891190fa
SHA512

b98f24a9793a066fe8fd0685947fa6ff8d56f9c1857796c2c01b818751d261ed8ac86907aa009397fd3574a07493cde785fcd0fe7c07c73ec79de1b6f57d991b
SSDEEP

3072:IQtYoUlbXx8J27aOQImMrXhOYTD/kpvCJLnY:IQtYHbBfQ+rXhOYnC4Ln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbb287e5803aa195af0352bb88218baf

Files

cbb287e5803aa195af0352bb88218baf
.exe windows:4 windows x86 arch:x86

f243280f81149a6b85112d518a5666a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointA
VDMOperationStarted
LocalFileTimeToFileTime
WaitForSingleObject
GetSystemInfo
IsDebuggerPresent
VirtualAlloc
GetCommandLineA
ExitProcess
GetStartupInfoA
DuplicateConsoleHandle
IsBadCodePtr
GlobalFlags
WriteProfileStringA
SetFilePointerEx
SetLastConsoleEventActive
CompareStringA
GlobalHandle
RegisterWowBaseHandlers

Sections

atsec0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

atsec1
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

atsec2
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.atsec3
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ