ca249160f88e6f9567725af6c8b0ed82b0e879a0f99bdc3f1a368a634bb120a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca249160f88e6f9567725af6c8b0ed82b0e879a0f99bdc3f1a368a634bb120a9
Size

1.7MB
MD5

b0bbcd1e133e4bc3c5f4556569ca2f0e
SHA1

315a4d038044d6072c6300b00fcae786f605254a
SHA256

ca249160f88e6f9567725af6c8b0ed82b0e879a0f99bdc3f1a368a634bb120a9
SHA512

aeabe6f257ee2a71a2338d1a2084ff9b8d2aeade8339894e058ddb2d86cdfba70e0dbc1bce77f8d08e4f04077b67d8f204ba23661b08c5f29100fa07b6ed2093
SSDEEP

49152:74rQ28r2tcHmFD23SesjAFuTcNkRZybg:UnFFC+APN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca249160f88e6f9567725af6c8b0ed82b0e879a0f99bdc3f1a368a634bb120a9

Files

ca249160f88e6f9567725af6c8b0ed82b0e879a0f99bdc3f1a368a634bb120a9
.exe windows:4 windows x86 arch:x86

5eb2e3bd0f6322337477bfefe7eea7d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetDesktopWindow
GetCaretBlinkTime

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE