ca48910396119309fadf687b12a57c5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca48910396119309fadf687b12a57c5e
Size

76KB
MD5

ca48910396119309fadf687b12a57c5e
SHA1

735c9d2907604dd84954d93024d9c8df5acd05b9
SHA256

23a11af80fe075b40bd66715afb760b7787144e59334a229124dd61bb8244801
SHA512

5b173589389ddbfd736c847692293dce6d857f2e953143e87f20b8ab5063a759dcdf38f650fe4f1eb0a2d13dd178a9483a88a674ffc09a7d3c55880fd35fe1d4
SSDEEP

1536:XLYjdZXR/ucVjEGeFlN/JcX6UjVg5XGoyjAopjVrs2ryrd1vUQuq6:bYjzhWcVjEGKlNaKQoyjAoHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca48910396119309fadf687b12a57c5e

Files

ca48910396119309fadf687b12a57c5e
.exe windows:4 windows x86 arch:x86

190316094611f2f5e21b73dc35562379

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
SetProcessShutdownParameters
GlobalGetAtomNameA
_lopen
GetProfileSectionA
GetCompressedFileSizeW
SetDefaultCommConfigW
OpenEventA
SetFileTime
FileTimeToDosDateTime
CloseConsoleHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE