ca47fbbbe6251f6d8d501a6e0b5bd859 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca47fbbbe6251f6d8d501a6e0b5bd859
Size

70KB
MD5

ca47fbbbe6251f6d8d501a6e0b5bd859
SHA1

8e63ce783ab5c30af06684a864f00f13a2769dc0
SHA256

585a4cd1362abd8313a6d8b3d8f621301105c5afa1b4bd85d584d09723147962
SHA512

7e8aa0a4c5039ce4fb5b95df33047bd8986d304e53fbf7b340ef744f2a73a7127c80a9a6c6b046e48c7825f3306b95ec8e44aeac33c8de4f2f84d607432e9948
SSDEEP

1536:k1GRBvWvUc2F0FgeEdRN7/5iGMHCuJSLLQQ0EgSHBYYa:cGRBMUc2MgeEZ7/DMiySXn0EgEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca47fbbbe6251f6d8d501a6e0b5bd859

Files

ca47fbbbe6251f6d8d501a6e0b5bd859
.dll windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 39KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ