cbdc80be9ebf248ba10bf3fba68c66d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbdc80be9ebf248ba10bf3fba68c66d7
Size

604KB
MD5

cbdc80be9ebf248ba10bf3fba68c66d7
SHA1

0c300d451fb3162320c5f0a5832f8b0e53398237
SHA256

ec3e4105c89ddb947b2cd90eb3388919d7dc282380691bc6185446724bc6e19a
SHA512

764225367ced3aa43c7f73f2a74cc1c37157a284ebaf194f0a87b4236752f4bead558ad8ab1266775ec20c01ba0f4558ce4eeea436f1160d7e75e8dccd677813
SSDEEP

12288:HuSWwrCrhSkxBnM0vHnvEMnT+NZH3TiiRjvO3YX6X051Uj:OSWq2N794Dii5vOoqf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbdc80be9ebf248ba10bf3fba68c66d7

Files

cbdc80be9ebf248ba10bf3fba68c66d7
.exe windows:4 windows x86 arch:x86

d5f2d8849813a4009dd8b330de1b3bde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DefWindowProcA

oleaut32

VariantChangeTypeEx

Sections

Size: 574KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE