cb46f6a644a0f99d9f38cec2a4b9d480N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb46f6a644a0f99d9f38cec2a4b9d480N.exe
Size

16KB
MD5

cb46f6a644a0f99d9f38cec2a4b9d480
SHA1

434d027b80d785473adf44a7cac4f380006220ab
SHA256

a5b72b10a3f3777b6f1407fa2929e8bba8c84bc1f8d454e098522f809d66c6c3
SHA512

66a9e53b603a3e198a655b18dd61d845addfd1e3df921fe7665d91c89fe1cf63df83783db45303ec3f056d6128396db7cf9077598337b88de2c2c9cc2f21b2bd
SSDEEP

192:GYTC8gnRxxizGyceCXwuu6xtV4TtVYWkEvOwmsSl7ja1YvdlTwn/V+Osl:c0zGycFHlDV4BV/kEvOfjJd+Nyl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb46f6a644a0f99d9f38cec2a4b9d480N.exe

Files

cb46f6a644a0f99d9f38cec2a4b9d480N.exe
.exe windows:5 windows x86 arch:x86

77bc4c94329925fab055077cd2ff036a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DispatchMessageA
ShowWindow
LoadCursorW
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
PostMessageA
SetWindowTextA
GetKeyboardState
PostQuitMessage
GetClassLongA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
HeapCreate
DeleteFileA
HeapFree
HeapReAlloc
SetFilePointer
WriteFile
ReadFile
CreateFileA

gdi32

GetStockObject

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ