2ca7483a5c6ba1572a4137b4a9a7a8dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ca7483a5c6ba1572a4137b4a9a7a8dd
Size

115KB
MD5

2ca7483a5c6ba1572a4137b4a9a7a8dd
SHA1

e5503135d438c82c31a0dce68900aefbce555d58
SHA256

e5f966ef0873bbdc467440e199ed7534ecb22890ed2be70b715d3759b1248d56
SHA512

556a9805b9c8c5e752feccb0569ed09e66bb41552a69839fe26ab146e0824584a352d42c4a8be8cfe5bb463f58e6ce8993e355a0b19d05fd1fecbffe4d5087f7
SSDEEP

1536:bgDmyyKLxdVLf3gSi95/wKU+ZKMmGzbrS7y+XeRlp8E2bAwPDOkxeygmXEIoWLes:zyVJQ5/x7gTe/S7yHlL2bACKvjm0yeoL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ca7483a5c6ba1572a4137b4a9a7a8dd

Files

2ca7483a5c6ba1572a4137b4a9a7a8dd
.exe windows:4 windows x86 arch:x86

92d2f2e093d39b38ddecbb47b74f87ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterConsoleOS2
InvalidateConsoleDIBits
GetDiskFreeSpaceExA
SetEnvironmentVariableA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE