ca45e6c8a2f4b7819fbef58b78f9b057 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca45e6c8a2f4b7819fbef58b78f9b057
Size

83KB
MD5

ca45e6c8a2f4b7819fbef58b78f9b057
SHA1

5a58d4e25e9cd9ad8caa5011a944998344acda79
SHA256

a7d96305212f2ae320de3046d144ebf2e1ff024a7ea9e7e98e6d388714511a19
SHA512

78b291cc715a19e5f80b6ef26f874fe491dc419d2e6115aed890034370f88dbf6a23b99f58c2db824c73e72e987658f96e4aa080642a3099f3f66ecf5eb3c923
SSDEEP

1536:/F/BT4xT0qyiCRSRnVjV+UUiec15SyOLTHt7r9hmxFjEErxTWDTMqhGKYIZTET8Y:/Ft4xT0oCqnuryuHF7CFjBkMqhGKZTbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca45e6c8a2f4b7819fbef58b78f9b057

Files

ca45e6c8a2f4b7819fbef58b78f9b057
.exe windows:4 windows x86 arch:x86

32bc8cb21e7020ff886b53f7bf6f548e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleHardwareState
SwitchToFiber
CompareStringW
GetThreadContext
GetTempPathA
ReadConsoleOutputCharacterA
SetVolumeLabelA
FillConsoleOutputCharacterW
ContinueDebugEvent
ConsoleMenuControl

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE