cbc18cae96287c99737f5a0489be3e8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbc18cae96287c99737f5a0489be3e8d
Size

80KB
MD5

cbc18cae96287c99737f5a0489be3e8d
SHA1

535f52202c9f90fbd10feb309f324aa68292491e
SHA256

3ccc47e6e83734e92cc4b7e68705230e0c325b4bb4110d68c08bd87cb6b074fc
SHA512

6029bb52a7066a947e47890bbadc875c240b6c3c734110703d6194b7a70b7f50664b6904be2f5988b8ed967130335ed5ac9e5a1bd65f40052d1e37d0e77798ba
SSDEEP

1536:X7XhBv+8txmPa5/uuV0xBF2S4JNAL8qmXSMaAAkxCkNoWbCGd4fbDP:X7hBvrbmYC54JNOXcSMmkwHWbDd4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbc18cae96287c99737f5a0489be3e8d

Files

cbc18cae96287c99737f5a0489be3e8d
.exe windows:5 windows x86 arch:x86

8e0890cd29643509891174d00643b732

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

atl

AtlMarshalPtrInProc

ntdll

NtAddAtom

kernel32

SetLastError
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
GetCurrentProcessId
LoadLibraryW
GetCurrentThreadId
VirtualAlloc
GetTickCount
GetModuleHandleA
QueryPerformanceCounter

Sections

.textbss
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dqfxztc
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE