CasPol[.]exe[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CasPol.exe.bin
Size

100KB
MD5

0b12a8624e5a85091dc27aea5aa5df44
SHA1

39878931623bb697ff41277ee3ddd9cfc3670792
SHA256

82e948c9f17a5a5b974835febe35a5313818077d08ffc07130fb7c2afcce3cb3
SHA512

697c6f5163cb604df2f1b0b290792821e45174b2564a5bd94d4f9cc8c7f523d65a156e27f73936b04d3768ebfba36e3c239165a2c9cc1dfc0eb37f7337510d86
SSDEEP

1536:QSF7vA1hRqHNxxMjlI3ZC+0CtOss6mdcQ6A4vhZ91RKG:nA1hYPMUs6mdclA4vhNRKG

Score

N/A

Malware Config

Signatures

Files

CasPol.exe.bin
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ