cbfca9383efbd187bbb6e76d1f97cec2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cbfca9383efbd187bbb6e76d1f97cec2
Size

104KB
MD5

cbfca9383efbd187bbb6e76d1f97cec2
SHA1

fbdcb0311b4cbf545e0807773b4e5284ac4681b5
SHA256

693a9f37e139b71e2e19cd20619b5c14faa4edfea2e708d8b9d5284b5538f1fd
SHA512

7ab77821c75c471e51b38f8f132d41970cab845460b10aac65c4801fb147de94d81cb863d28245081ed100aca1c0ccfa79dc5b3db994596cb8840abc2962f611
SSDEEP

1536:qsuZRApfrOm5uRRFX2PTZmXCCq9G7QVYfQrQIeuZiBNxGio/MOSNS8mz:7MqtrODJXk9EsG75Me0idnOT9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbfca9383efbd187bbb6e76d1f97cec2

Files

cbfca9383efbd187bbb6e76d1f97cec2
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE