ca474ca6a221fdd67c12336e51592f65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca474ca6a221fdd67c12336e51592f65
Size

107KB
MD5

ca474ca6a221fdd67c12336e51592f65
SHA1

fe0df332d0d7f13940eae6addd108ae29412faff
SHA256

e316c3a1301f7c7305c59987d6361ba0ef8175bb59cd5c77e8dc6314047a9c88
SHA512

306481167d433b4616eafb31b127dd5e5725818ff195a27c216be936d31aedf1504d5df34ce863047857f09ad75e7fbe7026d87e013a880fa099d58936bb50c9
SSDEEP

1536:YsvDgvOq9zskMD9xH6xWx9R4PRzXwjNWarkMbPrksvYSi6EkRSfdh7XF:JvMv/4kMD9xH/x9iWk8TkSDSfdh7XF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca474ca6a221fdd67c12336e51592f65

Files

ca474ca6a221fdd67c12336e51592f65
.exe windows:4 windows x86 arch:x86

ef3351cc78df06b63f7eaff453a73442

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
lstrlenW
lstrlenA
DeleteFileA
lstrcmpA
lstrcmpiW
QueryPerformanceCounter
GetModuleHandleA
RemoveDirectoryA
VirtualAlloc
CopyFileA
GetWindowsDirectoryA
VirtualFree
lstrcmpiA
GlobalFindAtomA
GetSystemTime
RemoveDirectoryW
FindClose

gdi32

SelectObject
SetTextColor
GetClipBox
GetDeviceCaps
GetStockObject
CreateSolidBrush
SetMapMode
GetPixel
CreatePalette
SetTextAlign
DeleteDC
RestoreDC
SelectPalette
CreateCompatibleDC
SaveDC
GetTextMetricsA
GetObjectA
RectVisible
LineTo
DeleteObject
SetStretchBltMode

user32

TranslateMessage
GetDC
CharNextA
GetParent
GetDesktopWindow
GetSystemMetrics

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE