cb043047cf28d67c2dcf80375cb06480N[.]exe | Triage

Sharing

General

Target

cb043047cf28d67c2dcf80375cb06480N.exe
Size

45KB
MD5

cb043047cf28d67c2dcf80375cb06480
SHA1

ff919eae8c5a0795103660f6a6625a37ede913f0
SHA256

7ec1a896794fbd29a1a8705b87724a994d0a557e5ea65fb0a16074112db89d5a
SHA512

efe9bf06ced98618ce1b949981f58f6485f1fe1f02e8cd8682f20b45fe248e8db66dfe8632f37bb603b48e94c8371a7000489fd43c4fefeb4d24f0e2c7beff7d
SSDEEP

768:pn8YLsCdnc9j5d9e3BZKJ3Hi2HEEDcUe3I0DDC79vfo8uNUWFncOXkSZ8TCqYHQ2:pn8+sCdnWeBU3Hi2kEDcUeLDDCru9nci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb043047cf28d67c2dcf80375cb06480N.exe

Files

cb043047cf28d67c2dcf80375cb06480N.exe
.dll windows:4 windows x86 arch:x86

dbb268a858c1392d055274ded7894cf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

od.pdb

Imports

kernel32

ReadFile
SetFilePointer
CloseHandle
CreateFileA
GetModuleFileNameA
GetModuleHandleA
InterlockedDecrement
GetProcessHeap
HeapFree
EnumCalendarInfoExA
HeapValidate
IsValidLanguageGroup
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CompareStringA
WaitForMultipleObjects
HeapAlloc
ExitProcess

advapi32

RegOpenKeyExA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegDeleteValueW
RegEnumValueA
RegOpenKeyExW

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ