cbb9260c81202124dd19846f8b4a3eca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbb9260c81202124dd19846f8b4a3eca
Size

55KB
MD5

cbb9260c81202124dd19846f8b4a3eca
SHA1

7da439b1009ab2679bd39cc9b2357d66f084f617
SHA256

e91779bdec5d689bf709e9d7ccf77e1229d63bcb73fd93a5ed143cd0baccbd43
SHA512

4a75d0716a780cf1cfaa0378385e14716d0fd4bbf6dbab6e05101f5fe901f639e8606d99b7400a57139d984c3c967f9b93c9f838616129d9563e5c621371b51a
SSDEEP

1536:5MCFw9qi7qdt1DxQDSrYLZBqxZMfVVtZigAjrnyVo:5MtwblDGW2BdnZDQWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbb9260c81202124dd19846f8b4a3eca

Files

cbb9260c81202124dd19846f8b4a3eca
.exe windows:4 windows x86 arch:x86

4c0c4f68eff15cf5001f6952dc85cb0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree

ws2_32

socket

Sections

.ty6
Size: - Virtual size: 296KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ty6
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE