cbcf6663ee24c93f0dc0ea9511ec1ac5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbcf6663ee24c93f0dc0ea9511ec1ac5
Size

83KB
MD5

cbcf6663ee24c93f0dc0ea9511ec1ac5
SHA1

5d12c5457c29e8dddd292758170f54bfb64b9eb2
SHA256

3a93847d6c60507b56005a845714432652b76d5a8cfc96dcab642f6fe446eba0
SHA512

b4c1113f11acc5d694a745c8b34edcfb5fbedf5a83d7f77f601466815aaa2de94b8a7ec7c8adc71c510c9c906565c302f5a67e229543066290154672784cda45
SSDEEP

1536:j+9utuWaDWWcivr6Mia7FZEJsP8njEErxTWDTMqhGKYIZTET8bDQ:yhnTOM78JsEjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbcf6663ee24c93f0dc0ea9511ec1ac5

Files

cbcf6663ee24c93f0dc0ea9511ec1ac5
.exe windows:4 windows x86 arch:x86

aa3cfa417428c14b29d4089ade6dc93e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToTzSpecificLocalTime
GetThreadTimes
GetCPInfo
GetGeoInfoW
InitializeCriticalSection
WaitForDebugEvent
CreateToolhelp32Snapshot
CheckRemoteDebuggerPresent
FindFirstFileW
LocalLock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE