ca12430b68a4963badda540f577a7c11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca12430b68a4963badda540f577a7c11
Size

45KB
MD5

ca12430b68a4963badda540f577a7c11
SHA1

af6d27cc320eb3e81f943562243b14d6b15f5ca3
SHA256

5ec4ee270895abe554f6cdfe8cc588c6d6714511c6ecb0f6dd655cb0e3dae8cf
SHA512

31b9871e7e55c6502c7ed5dabbcef6407c339ef7f5d12103162cfc75d8132aa87c72cb7f6e0712dd1f8851a548cbbbbdbafed1c8049bbd64c0de2793a788b283
SSDEEP

768:Lh/VJrVRbugWjVKrEupxO94uXqQfK60P434UJQhZ7RZ9GgJft+swmBQ:NVnIgGKrEupxC4ZQfKn84UJgTh+AQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca12430b68a4963badda540f577a7c11

Files

ca12430b68a4963badda540f577a7c11
.exe windows:4 windows x86 arch:x86

3138c95923c44993ee77423b44c71b16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsExA
WriteProfileSectionA
VirtualProtectEx
SwitchToFiber
GetEnvironmentVariableA
ReplaceFileW
RequestWakeupLatency
LoadLibraryA
GetLastError
SetTapeParameters
GetModuleHandleW
WaitForMultipleObjectsEx
GetSystemTime
SetVolumeLabelW
_lcreat
SetNamedPipeHandleState
CopyFileExW
LoadLibraryExW
LocalCompact
WriteConsoleOutputAttribute
GetProcAddress
ReleaseSemaphore
GetCurrentProcess

user32

SetCapture

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE