ca1cdb7d4f4831fc975e3454a4000546 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca1cdb7d4f4831fc975e3454a4000546
Size

54KB
MD5

ca1cdb7d4f4831fc975e3454a4000546
SHA1

cdb439da62a301386d0537a6200c7a5babf3e5f0
SHA256

d5166b4629e68dfa8df94b485a06dd0ff629a6e507d7c3f126f2473599414a13
SHA512

e9b9761cf5c69a2399143b84855d629042be91296f98c65273ccdb2e8535e31b78d93777fb160ded587e22c57bfc3264e30d6f9c240ec398b40dcc638bd01534
SSDEEP

768:W47Co+IAjVLCy6mdIQAo25NXWCbpZQ9gofdK0kf5amioKlGKU:qo+/jlsmfAf2Cbj8LdK0kf5amifU9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca1cdb7d4f4831fc975e3454a4000546

Files

ca1cdb7d4f4831fc975e3454a4000546
.dll windows:4 windows x86 arch:x86

ebafac331daa78bdbdc501f931a0bde3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

Exports

Exports

GetPassString

Sections

CODE
Size: 48KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE