cafb62ef0721ebb55a8dbb37c9716477[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cafb62ef0721ebb55a8dbb37c9716477.exe
Size

6.4MB
MD5

cafb62ef0721ebb55a8dbb37c9716477
SHA1

41951c76259cfa036551a8615dcbe50e63ef790d
SHA256

2a965fc82c9dec2cd7e2bb3e3e7f010b2db0b4dca9bcf379aafd79e0a9b535b2
SHA512

454cb0efc9a179192eb0f930e490730d6a9a888423bd52cec2f57694775d493aaac4d6143efbb701018af5aefadcf18770375f260baf36dd579f3b171da84a12
SSDEEP

196608:XgmVa54pPwo+yqgvdC8kfF7j1oXdujKJFQY:XgmVamx4R1otRoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cafb62ef0721ebb55a8dbb37c9716477.exe

Files

cafb62ef0721ebb55a8dbb37c9716477.exe
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 574KB - Virtual size: 573KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 483KB - Virtual size: 515KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t6]
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.YcX
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.awA
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ