fca5e34c40e74a0ac506180cccb95bf05c14d4a46636eca8e99b70ca4fc97d0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fca5e34c40e74a0ac506180cccb95bf05c14d4a46636eca8e99b70ca4fc97d0d
Size

1.1MB
MD5

59acddd147acc633e78900f50d2c2762
SHA1

bacb8a628fc934742b67a210d87327aa192d9ea6
SHA256

fca5e34c40e74a0ac506180cccb95bf05c14d4a46636eca8e99b70ca4fc97d0d
SHA512

5f0d471cd1053578acc035535870f14fd23ab2f46bb95b541185543a6ecbe68bd5aaa5e0c77c86cee5dd0649e16f98ac11c5b5afb920f28acddb12f09ea0ca47
SSDEEP

24576:TGgoe5Q0nyofLPeHy2sjvVmyfXrNXbjFveqq1:KwQ0nyoz3tvtLleB1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fca5e34c40e74a0ac506180cccb95bf05c14d4a46636eca8e99b70ca4fc97d0d

Files

fca5e34c40e74a0ac506180cccb95bf05c14d4a46636eca8e99b70ca4fc97d0d
.exe windows x86

3de737560d80707fbf000766309e79f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetConsoleWindow
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetStringTypeW

user32

wsprintfW

ole32

CoUninitialize
CoCreateInstance
CoInitialize

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE