cba333636a5950c320513de5bc402443 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cba333636a5950c320513de5bc402443
Size

114KB
MD5

cba333636a5950c320513de5bc402443
SHA1

75120d3d5db9069d0d759d1846e5ccf11be9b6d4
SHA256

9d7d1e083510cfcd5391f34f23d9e6eed0e37f27be475f2d2a0a794db80de2a5
SHA512

99be729679403f62709c2d2501103c5c54f6db1c948c41fec94d9554a3c8b1d49bcf61c8789dfc94d40ab17284d44ff6be57553db3f40275e338bdfaa4694f61
SSDEEP

3072:ESHYx++5g4HJF8C7X2CP9QWg2UfeRD68wb:7HYx++5V2CP2jcD68w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cba333636a5950c320513de5bc402443

Files

cba333636a5950c320513de5bc402443
.exe windows:4 windows x86 arch:x86

8a5b07646435cad6700550a48c0c2cb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DragEnter
CreateUpDownControl
ImageList_DrawEx
CreateMappedBitmap
ImageList_Create
MenuHelp
DrawStatusTextW

advapi32

RegQueryValueExW
RegDeleteValueW
RegEnumValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueA
RegDeleteKeyW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ