caffb86feaf5e2f2fec9d4a28192bdbd9f79cc644667b93317e818fb12fbd342 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caffb86feaf5e2f2fec9d4a28192bdbd9f79cc644667b93317e818fb12fbd342
Size

127KB
MD5

6be84ca62142b09dba415c6d52dd9885
SHA1

46858f0229739f74eb28c862f880ec4abe665069
SHA256

caffb86feaf5e2f2fec9d4a28192bdbd9f79cc644667b93317e818fb12fbd342
SHA512

62ffc91c95f7ae75f910e940bc023f8b54ec91fe7daefaca11c45a17ad8d26e8e0748578879c3be57c7e3800d5f3c05849cdbac7d5554369eb6bb58397c4046b
SSDEEP

768:b7uHj94SaX5dbRHhdkGXP8wAQscRtlu+FAr4ygtxFsPMXXKvAE8wrJX:3uiSC5dbpheGfnAQxh5FAr4ygGP7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caffb86feaf5e2f2fec9d4a28192bdbd9f79cc644667b93317e818fb12fbd342

Files

caffb86feaf5e2f2fec9d4a28192bdbd9f79cc644667b93317e818fb12fbd342
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ