cbfda5d2b834b5ab42b38331eeb18f09825299edaae48ff29ee63a70c732b08f | Triage

Sharing

General

Target

cbfda5d2b834b5ab42b38331eeb18f09825299edaae48ff29ee63a70c732b08f
Size

4KB
MD5

591116c8465540f45bf93d2aea12fc7b
SHA1

8863bec89b01bc6ec93b14cfc0b104058b5256d7
SHA256

cbfda5d2b834b5ab42b38331eeb18f09825299edaae48ff29ee63a70c732b08f
SHA512

eafcaff1e9f4b9d7ac96bea3d13199227fe6d8f195c6153edbcb522ad752a0a1ac5c6e0d1d23c4e39ced88e19d90e601f5ce55a1dbbb33da06c0a359d19ad80c
SSDEEP

48:Zdni+Wyi18DN0nCvTaE6nc9fhXcGEY3sJd9ga91Rs1znA7B8mOo4jUx7OtKGcQEl:Z0v4mUWKh9ctgC1RGnKymV44ShC7+quQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

cbfda5d2b834b5ab42b38331eeb18f09825299edaae48ff29ee63a70c732b08f

Files

cbfda5d2b834b5ab42b38331eeb18f09825299edaae48ff29ee63a70c732b08f
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ