ca17cf34aaf94e1f611aaaf2ab28542c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca17cf34aaf94e1f611aaaf2ab28542c
Size

20KB
MD5

ca17cf34aaf94e1f611aaaf2ab28542c
SHA1

e2aac31860cafa098f42b08883cd0d54f89a27be
SHA256

fc631fbddaa2a76685e61b4b02b44c7d6ae19c569c6c9f40985ecef80e0358be
SHA512

4c36a61b955436114e14092599ce0a47526fb1752cf0d431b6ddc84dbb4211981187bec999f3336887252393bae2602988503c1298f6d8d64ebfb38f5492bf28
SSDEEP

192:La4TMsbgSr7HNLdb+dt9IAFjd/GAWcW//Bwm4xfjukkP1oyvqQ9Z1:L3JPvbct9Ii7aJGxfjzK1B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca17cf34aaf94e1f611aaaf2ab28542c

Files

ca17cf34aaf94e1f611aaaf2ab28542c
.exe windows:4 windows x86 arch:x86

47585a51d6074764675b191595d834b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
MoveFileA
DeleteFileA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
CreateProcessA
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
GetModuleHandleA
GetStartupInfoA

msvcrt

div
ceil
atoi
_access
_except_handler3
sprintf
isalnum
srand
time
__CxxFrameHandler
??3@YAXPAX@Z
atol
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
isalpha
rand
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ