2caf18c5e952b4770992137c65b3c7eb | Triage

Sharing

General

Target

2caf18c5e952b4770992137c65b3c7eb
Size

2.2MB
MD5

2caf18c5e952b4770992137c65b3c7eb
SHA1

623d211f113d1c556006f6a6000474cdd034467a
SHA256

e910213e91de17837384e5d5aa33c4b5f9eb2eede152ffedfc86d40b231f71e9
SHA512

e6bb10e9aed8b358ac51061a9995dc695d66318902ef25fcdfe317a6d15f24dded47d1df7177df1e33bdadfd3f6c179acdfb0a2706774aac66d41e60b02199ca
SSDEEP

49152:OCyNN+VYY6DL9GZjY2yVSgPIf+kDYdVQxot+j1AdPn6fZ80Es:OCyNN+Ps9YSVPs+6VxYA46Rn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2caf18c5e952b4770992137c65b3c7eb

Files

2caf18c5e952b4770992137c65b3c7eb
.exe windows:5 windows x86 arch:x86

7445db671fc68a8e28f584e00639ebe3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32 winmm

StartDocA 0c0

Sections

.text
Size: 1.5MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ