2ca1618545eb11ef6acb9b63b058ec83 | Triage

Sharing

General

Target

2ca1618545eb11ef6acb9b63b058ec83
Size

47KB
MD5

2ca1618545eb11ef6acb9b63b058ec83
SHA1

70c6dd788adc1891dd3e314f1737f455a96f4224
SHA256

10cdd823e426c28b37517482c4ddb608faef7834ffd32e48354a4b8e9399e939
SHA512

f0e16e90256c5f8eb6f8f56f143c9179deaa8b63089654f7819d8cad71f89d02dcfafd2cb4ac0d486d109a4bb1dfb2451c60c960a577c05d8cb40e49706056c9
SSDEEP

768:dyLXJPmMEzQxH9fW6QVYl5hXf6MM/vTAO7n0LnF86jZw:dyLXs3IH9foSl5hXfjM/vTR7n0u6jZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ca1618545eb11ef6acb9b63b058ec83

Files

2ca1618545eb11ef6acb9b63b058ec83
.exe windows:4 windows x86 arch:x86

9184367f8d1f9986888f0eed2e6f8bf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
WriteFile
CloseHandle
CreateThread
CreatePipe
ExitProcess
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE