cba4a04a945d1356f54ef393834a059e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cba4a04a945d1356f54ef393834a059e
Size

15KB
MD5

cba4a04a945d1356f54ef393834a059e
SHA1

3383d2a56854a62ab05b9da342ace5d8a8788a0f
SHA256

8189035560c4a71c4358b49d1dfff4d68cb7e6f7feac0944f90523fb97f346f6
SHA512

3d95caf04c0f22726aa79f09a6d3a6fd0dca0f24e507e508bff5c025239d82ce0cf73d18d84c84fea7eb9fc3c96b3cd6f0fceabe4c3df17446b45de32a74d646
SSDEEP

384:sYho7iQAtR/zv8vudVieokSSrOtEajeen3cQFRRXmId39k:mATTMud/atqU3pHdNk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cba4a04a945d1356f54ef393834a059e

Files

cba4a04a945d1356f54ef393834a059e
.exe windows:4 windows x86 arch:x86

d8b71e1b9f8a3570005c314744903d3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
LoadIconA
wsprintfA

kernel32

GetModuleHandleA
lstrcpyA
lstrcmpiA
lstrcatA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
ExitThread
FindResourceA
GetCommandLineA
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetTempPathA
LoadResource
LockResource
RtlZeroMemory
SetLastError
SizeofResource
WriteFile

Sections

.text
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ