cb401e92989421c445d62e8c2aa7952475d08fd207d842a0297597389cd09026 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb401e92989421c445d62e8c2aa7952475d08fd207d842a0297597389cd09026
Size

37KB
MD5

a60733028cc9b2f965ed172dcf75ec0c
SHA1

fd8c02b15181f69daf7abdf6672f71fd6fe13c40
SHA256

cb401e92989421c445d62e8c2aa7952475d08fd207d842a0297597389cd09026
SHA512

27940ca2949c961aad635f4a54637d318e423732f8fe52a9f5aa6763c49fe512f284cf4efc197c97c2d9ee47d657536093034cd6addcece5292099109700d2a2
SSDEEP

768:Y4VqN6B1syPDb5d3mOWDsKxlpv84t+4pa75KjMr:06oypd3mOWDsKxlN84W75Kor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb401e92989421c445d62e8c2aa7952475d08fd207d842a0297597389cd09026

Files

cb401e92989421c445d62e8c2aa7952475d08fd207d842a0297597389cd09026
.exe windows:4 windows x86 arch:x86

405884de03f1a4d257d3812157bfae8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
PostMessageA

kernel32

GetModuleHandleW
HeapAlloc
GetProcessHeap
FindClose
GetFileSize
FindFirstFileW
DeleteFileW
GetStartupInfoW
CreateFileW
FindNextFileW
SetFilePointer
ReadFile

gdi32

CreatePen

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ