cbdaa43b89d05dde422ee375a48d9e4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbdaa43b89d05dde422ee375a48d9e4f
Size

15KB
MD5

cbdaa43b89d05dde422ee375a48d9e4f
SHA1

ec2f09bc63ad0525c35d54f8e81a2365b8925d8d
SHA256

770db2cf6a7abc957021164d92c311b36a4af6039afecf928546b9cbe80fbb92
SHA512

43564b63a948175e9d1170ee6fddde3e061e42a59ef47ec6482bbce6a5765230cd440282b84ee0c28e512b9705ddef3243b5dbb6ec22df010dcad286d0dd668a
SSDEEP

48:61uXuO20aXB2mLobJq9YESbM+b0nsztzGDVWB//GDBXxMt0WgBqR:7+O4BTMMmESY+b0nszxGZWFixMt/gQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbdaa43b89d05dde422ee375a48d9e4f

Files

cbdaa43b89d05dde422ee375a48d9e4f
.exe windows:4 windows x86 arch:x86

c494458029910d0ed6df63da0b05bbd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ