cfb511bdb1acc3b2f7be5c434d1149ca8c796201f86eed8d01a137b11728bd04 | Triage

Sharing

General

Target

cfb511bdb1acc3b2f7be5c434d1149ca8c796201f86eed8d01a137b11728bd04
Size

26KB
MD5

214c7f84565f168e01713d04aa1df254
SHA1

3787fb9dff72c4a93f2a91920fcd6cb81aa19b7b
SHA256

cfb511bdb1acc3b2f7be5c434d1149ca8c796201f86eed8d01a137b11728bd04
SHA512

1051fe990d2361f9a3d3072508aa8ba04d9213d69349fede8757fc9c27601fee1adc52b36cf42f0bba7965a697b4733a205d773f3cb5995a46be409ddeb64f61
SSDEEP

384:GGjw95yGiZqhpTUohIo/U4nllHQCh1I6xpPsZEGp:GGGyDqhpJ+o/U4nXQQ1i6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfb511bdb1acc3b2f7be5c434d1149ca8c796201f86eed8d01a137b11728bd04

Files

cfb511bdb1acc3b2f7be5c434d1149ca8c796201f86eed8d01a137b11728bd04
.exe windows:4 windows x86 arch:x86

f8d8aee08196483a265bcf1e1242daab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
GetWindowRect

kernel32

GetStartupInfoA
GetModuleFileNameA
CloseHandle
GetModuleHandleA
LoadLibraryA
HeapAlloc
GetProcessHeap

gdi32

GetTextExtentPoint32W
SelectObject
TextOutW

comdlg32

GetSaveFileNameW
GetFileTitleW

comctl32

ord17

ole32

CoTaskMemFree
CoTaskMemAlloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ