ca43e84804afc3aa10fcb9d8031fbe48 | Triage

Sharing

General

Target

ca43e84804afc3aa10fcb9d8031fbe48
Size

166KB
MD5

ca43e84804afc3aa10fcb9d8031fbe48
SHA1

bae95788126a210d7154e6594cd5dab4de8ffc06
SHA256

7e939ae8473173dee703448b707f0b06c40d441511f661a588f454e977c86278
SHA512

e905b72e49be1573179905ce83c69efc0bfea87d581b21c076cd28544dd7a7e9624d8567e7a8216f7ec7994ab23cc29bd68d5a81673588cc5c97a12eda203775
SSDEEP

3072:U029Fq4TKOdKNAd7HJNEJ0rE083A6VbUP+8Fry6mFx29L78VoXSK:U02qqHoK7nE+rw37VAy6mK78VoXSK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca43e84804afc3aa10fcb9d8031fbe48

Files

ca43e84804afc3aa10fcb9d8031fbe48
.exe windows:4 windows x86 arch:x86

cf93f9c67150de2a30d3b2fd35cb5016

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
EnumResourceLanguagesA
GetEnvironmentStrings
UnhandledExceptionFilter
GetStringTypeExW
WriteFile
FreeEnvironmentStringsW
SetUnhandledExceptionFilter

user32

GetDlgItem
IsWindow
SendMessageA
CreateWindowExW
DestroyWindow
EnumChildWindows
GetWindowThreadProcessId

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 85KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ