cbe82ebc9a92dfe413577d019c68aaf8 | Triage

Sharing

General

Target

cbe82ebc9a92dfe413577d019c68aaf8
Size

76KB
MD5

cbe82ebc9a92dfe413577d019c68aaf8
SHA1

1ca435b35c4487ff81d3ab48539adff5a288b0ad
SHA256

6759575ff87560ddc47f877a01f20d631053f70193fe31c6bced9b4e3025e662
SHA512

fa37dfa3b4a4f6281a90eb64c3e85934d9797cd23e2b05eac417722a7068d77a0cc3c6d09dc732d5a29fdc2cfb92b0a680fb279343193889f359b695bc482a9e
SSDEEP

1536:vmxH1qNCalkFCM0u2mI7vBhxhFdRNmKwrCspjVrs2ryrd1vUQuq6:EGtluR0u2xVPjNOHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbe82ebc9a92dfe413577d019c68aaf8

Files

cbe82ebc9a92dfe413577d019c68aaf8
.exe windows:4 windows x86 arch:x86

6597e210300374a04d63bf89e49f5c17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Module32FirstW
LoadLibraryExA
GetFullPathNameA
WriteProcessMemory
VerSetConditionMask
RegisterWaitForInputIdle
EnumDateFormatsExW
PrivCopyFileExW
IsBadWritePtr
GetDllDirectoryA
SetLocalPrimaryComputerNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE