cbeabc7a6629f6aa7ee2eee64826db15 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbeabc7a6629f6aa7ee2eee64826db15
Size

34KB
MD5

cbeabc7a6629f6aa7ee2eee64826db15
SHA1

2701d1cd39ef570a0bf6db12e85819f9731d3c36
SHA256

72125dd9257d396b273ec1fec4d56bdd60502d03b7ee81c64030ef6f5759c8da
SHA512

e162293cc0ac814eebd7bcb8ee36f9add751c5639a666d1ab5cb2e2f3b3b2331db5f46a9e6cc06c601f7ebe69ed44f0995ef6e34ebe351ee576c16faa32034c1
SSDEEP

768:VFO2A7dQ0GE3rH9zWlhCGxOwezeFc7oDRzAqr1T93fSpEA/:V5ARvbE9eUL9s6FhG/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbeabc7a6629f6aa7ee2eee64826db15

Files

cbeabc7a6629f6aa7ee2eee64826db15
.exe windows:4 windows x86 arch:x86

1d43cd5e399f31c49a6f934c29809b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

Sections

.text
Size: 28KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE