ca2d3886ef6c20f43343501570c6e15d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca2d3886ef6c20f43343501570c6e15d
Size

31KB
MD5

ca2d3886ef6c20f43343501570c6e15d
SHA1

a4ad1cbb770747d653552eb911388bf4c111ac32
SHA256

881941ba4d10be2d5051bcaf6a65ea701ceac251b2422f076cabd1f5f906973c
SHA512

e97425191850e42775aefa08fa220a84778b87bd5a94d4ff370a4da3e0eec43e9db14c219b914c7cb77f350876ad31bde26377e8c054ccf23d65c7aae0929dca
SSDEEP

768:FF+g37bhjHxVdit4glaFheb5vux/JdCKdaZAfpcy:BB3dI4gl6RWeaOm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca2d3886ef6c20f43343501570c6e15d

Files

ca2d3886ef6c20f43343501570c6e15d
.exe windows:4 windows x86 arch:x86

d9058b6676bb3c7acba704f3953fdcce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameW
EndUpdateResourceA
SetCurrentDirectoryW
GetExitCodeThread
DeleteTimerQueueTimer
FindVolumeMountPointClose
LocalFlags
WaitForMultipleObjectsEx
GetConsoleKeyboardLayoutNameA
SetConsoleMode
WaitForMultipleObjectsEx
OpenJobObjectW
VirtualProtectEx
GetSystemTimeAsFileTime
HeapValidate
QueryPerformanceFrequency
GetTimeFormatA
BuildCommDCBW
GetPrivateProfileSectionNamesA
CompareStringA
SetCurrentDirectoryW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ