ca003c89dc1e54fe7d41de76f383dc99 | Triage

Sharing

General

Target

ca003c89dc1e54fe7d41de76f383dc99
Size

138KB
MD5

ca003c89dc1e54fe7d41de76f383dc99
SHA1

e702291ec5506f93a4266353ed3a3ad6ac1763b6
SHA256

79f4fa88b6caea4ee7984f5aa925f58f683313bd9e0810f663992896ae0d7879
SHA512

9d34f160eb4ae36d456d816fb5531e1641f1408f83f9a8a5c7bb9b91df697b49df2171f4c64c545d11fb81bfc487b8feb9b604bb7af2d91517e72bb035328193
SSDEEP

3072:SI5O4uCCIp1cru1m/dUICjSj0HXdesj5YwJkuRJzy2aF/uuNU40jhDN2N:7O4uCCE1crGtmnsjKuRbuNWj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca003c89dc1e54fe7d41de76f383dc99

Files

ca003c89dc1e54fe7d41de76f383dc99
.exe windows:4 windows x86 arch:x86

306de641e91e3d011ef7f8890b662aff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
CreateEventW
CloseHandle
CancelWaitableTimer
lstrcpyn
lstrcatA
PulseEvent
HeapLock
VirtualLock
LeaveCriticalSection
lstrcmpiW
ExpandEnvironmentStringsW
CreateSemaphoreW
lstrcatW
GetLastError
MulDiv
GetProcessHeaps
WaitForSingleObject
GetLocaleInfoW
GetNumberFormatW

user32

CopyIcon
SetDlgItemTextA
ToUnicode
DrawCaption
GetWindowDC
DefWindowProcA
InvalidateRect
SendMessageA
DialogBoxParamA
SetLastErrorEx
RegisterClassA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ