ca049d12617eb0dcc7428084a4dcf16b | Triage

Sharing

General

Target

ca049d12617eb0dcc7428084a4dcf16b
Size

100KB
MD5

ca049d12617eb0dcc7428084a4dcf16b
SHA1

38eeaf913edf9e5a5312fc6ffac90dd8ee1b68a8
SHA256

55d88d8461ecbd421bd1c4c1a0a23a0eca857bcbf209481d00970573d361fe69
SHA512

3e6e57a0847d58cafa3a721d38903a9ad735484a7c0cf0435a9d019f4fc94339409ee4b3d567851235fc42dfd89eb87c288841c3914a3bb2a3681a39ba9de305
SSDEEP

3072:8pxCHv/6y5RKqxMPiwaNut32x2Io1zxQe:8pgPSyyZPjd0x2zJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca049d12617eb0dcc7428084a4dcf16b

Files

ca049d12617eb0dcc7428084a4dcf16b
.exe windows:4 windows x86 arch:x86

4a4d034e7418ae8b25b6f9177a441e98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
GetWindowsDirectoryA
FreeResource
WriteFile
GetTickCount
GetTempPathA
LockResource
LoadResource
SizeofResource
FindResourceA
MoveFileExA
SetFilePointer
CreateFileA
CloseHandle
ReleaseMutex
GetLastError
CreateMutexA
GetModuleFileNameA
GetCurrentThreadId
GetModuleHandleA
GetFileAttributesA
GetStartupInfoA
DeleteFileA
GetSystemDirectoryA
ReadFile
CreateProcessA

user32

GetInputState
GetMessageA
wsprintfA
PostThreadMessageA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

msvcrt

__setusermatherr
_controlfp
strstr
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ