1caa1facf60af2c59b0a41551ed0d192 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1caa1facf60af2c59b0a41551ed0d192
Size

662KB
MD5

1caa1facf60af2c59b0a41551ed0d192
SHA1

8a1b1b8429e6a60eeab4f40409e645b1e3f491ed
SHA256

98c235c7d3035419bb281038b1e308858607b516bafece878e7010e724a26d33
SHA512

0535ce6aa1305cae94991d5ad77ea01583e9658548bc8b6d6581a8fbce86da28733789630d181a87f9aaa125cf3bfcc28aba30ceaf83fb58b52c6a50a46f6434
SSDEEP

12288:rS5mRh91lsYij7l3NLhtBW4tnW4M0S+SSFXoBsQ1K8kJAT4qDcWOvuiDuLP8Uz0O:m5mRtzURTHA4oS6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1caa1facf60af2c59b0a41551ed0d192

Files

1caa1facf60af2c59b0a41551ed0d192
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

S9(6cY
Size: 458KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ