cab947845f970577dd71a8c256a04a40N[.]exe | Triage

Sharing

General

Target

cab947845f970577dd71a8c256a04a40N.exe
Size

28KB
MD5

cab947845f970577dd71a8c256a04a40
SHA1

9548b0b19feecaeaedd1c09d132752985ab7d86b
SHA256

4d6e505d0caf05b6af2ff1682bb0895278a91871bde7fe5d8c1d64bf2df1b197
SHA512

30b3e835fe0faf3802b51ba3f4c35baa51727762bf8a34e544abd5a7140e506e79556527eaecefcc8cb5b90fbb0865cbe1fdcf18b69add80d174b4a087dee50d
SSDEEP

384:+7ZfapsmVHgRK/rJ1OetA8gA49lBrenVyG+txHBtNsmSJJEFk+zm0aP:OpgTARK/rRggVGhBRAEy+zmVP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cab947845f970577dd71a8c256a04a40N.exe

Files

cab947845f970577dd71a8c256a04a40N.exe
.exe windows:4 windows x86 arch:x86

5bdbfadc30986867f14f8da3f77b42ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageW
DialogBoxIndirectParamW
ClientToScreen
wsprintfW
MessageBoxW
GetDlgItem
MessageBoxA

kernel32

ExitProcess
GetFileSize
CreateFileW
CloseHandle

gdi32

LineTo
TextOutA
MoveToEx

comctl32

InitCommonControlsEx

shell32

DragFinish
DragQueryFileA
DragQueryPoint

wintrust

WinVerifyTrust

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ