ca025de9584b4c7898bd71d61b524986 | Triage

Sharing

General

Target

ca025de9584b4c7898bd71d61b524986
Size

4.1MB
MD5

ca025de9584b4c7898bd71d61b524986
SHA1

b314dc7d0fdab23fb207af2aada8dc5c0e4349f9
SHA256

6c85cad0ae7e03f46b66b19d20d3475c17600014e91708f1e8e6a6a68e6805ca
SHA512

bd1eba2bb84f53c3620383fae040e2fb96adebe7722086367f26332cea70e047ea473641615f63c8ea5fef4493650e865f4bae178c41f7076b3193a9d14778a0
SSDEEP

98304:QJgUq0AnVzqvE+p/qiC76EOxOfuJf2l/Y2bQYB9Sl6AfUR:Qq0AnVzstU6EkJf2l/ZPJAfUR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca025de9584b4c7898bd71d61b524986

Files

ca025de9584b4c7898bd71d61b524986
.exe windows:4 windows x86 arch:x86

c9749513208288305099900ce01b1603

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
ExitProcess
lstrcatA
lstrcpyA
RemoveDirectoryA
DeleteFileA
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
lstrcmpA
lstrlenA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetFileSize
GetModuleFileNameA
VirtualAlloc
VirtualFree

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gentee
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ