caa0907dbb7a89c7362d2fc93a0292e63107b07a3a6f7bb8bd0b84b6f1e315e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caa0907dbb7a89c7362d2fc93a0292e63107b07a3a6f7bb8bd0b84b6f1e315e9
Size

6.9MB
MD5

51a389895cd36496aa7eb62f7ee5d633
SHA1

8e61dc4ef0b5a7754f16af4ba7654e52ce49bef3
SHA256

caa0907dbb7a89c7362d2fc93a0292e63107b07a3a6f7bb8bd0b84b6f1e315e9
SHA512

fc8ce7abb177edebab26aecea4d0a9f2d2fb1b96336d866ac50bc85dfa925c183a473139215a8787ddf6800536b99ded0d11672a749bb855372397537359bf6f
SSDEEP

196608:fK2+nNevvWstwr2m5BmycyEbSfasepd5e4x6+AjZ6mjxzj:fDY6tiP3myRfzepXe4ny8gxzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caa0907dbb7a89c7362d2fc93a0292e63107b07a3a6f7bb8bd0b84b6f1e315e9

Files

caa0907dbb7a89c7362d2fc93a0292e63107b07a3a6f7bb8bd0b84b6f1e315e9
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ