cb997c15d91e03e71dea93571c5222de | Triage

Sharing

General

Target

cb997c15d91e03e71dea93571c5222de
Size

280KB
MD5

cb997c15d91e03e71dea93571c5222de
SHA1

22d698e8f8e56c8f8c7edb733a77a36ea782fcb4
SHA256

11e831aa8f4da8b9ceb1ff5a56c3943f86cebcad8871ce8bb5f19eb06ecf17b3
SHA512

ac8cfec96f59b38fc14d6590e75e2fe5d7ec6b4ec7f57e96aa95273508a438e6414902dfa7541881914d54ee50b7a591b91c1239fde04fc10dc9c73941c583c4
SSDEEP

6144:VfyvEJCGqAlLeDcmE798Mj4HWdCB9AF4za2kaADxv9polz/kqq+Y:R8AhVmEx8RHWdCJYaADxvfSq+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb997c15d91e03e71dea93571c5222de

Files

cb997c15d91e03e71dea93571c5222de
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 269KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ