ca18b114ea5d66ad1e64886d74460aa6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca18b114ea5d66ad1e64886d74460aa6
Size

20KB
MD5

ca18b114ea5d66ad1e64886d74460aa6
SHA1

abb83d0bac64483859871354857505137acdc3bd
SHA256

0295c9db15e5ca179124c2f932e17cbdfa2196869308db17ebdabd8d6e1da1b9
SHA512

67c535d7d552ad0afd3cf6d53e202f1a660d86ee429e425ba3fff90f0302fa02fc09a6bebc8d80e3db9f01d3a0aa95b99299145b2c0618ef4b7af5042864b52f
SSDEEP

384:YtsilEkYdk+5o3OIbT1Ku8EzT3+ixnFak0q68MQxFSXSVRq3p6dMTPXKH:AikYdk+5y/8EH+WnsKTkmRqQaTPaH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca18b114ea5d66ad1e64886d74460aa6

Files

ca18b114ea5d66ad1e64886d74460aa6
.exe windows:4 windows x86 arch:x86

c1e6b9b4c72d7e5d2d0b7c4900fa90c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 14KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ