ca2e769a1b89a0fc5774478b70f5ebac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca2e769a1b89a0fc5774478b70f5ebac
Size

83KB
MD5

ca2e769a1b89a0fc5774478b70f5ebac
SHA1

36208a3bfe82202aac4ebd7b6b382b823c9ea1cd
SHA256

9d0ded94ed30c1834f217846230b190c6b79b11434af37e9a9e73f7aa538a639
SHA512

81d0ba7b7533b97518a71a279bb3da2ccbaa50c738aeef229316dc1d06d72cd9874f0e3df707af56266e56a7bb53c04c1e703d9e9771e8a7048d77b6b8d259f7
SSDEEP

1536:J9O9mDTY3I4ITaUc3WnZdH5oGg+t2GNPoMPwaXhs3ctx0DZ+uslo+Q:HD7WWXCGbt2GNPowwAh9U+Lo+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca2e769a1b89a0fc5774478b70f5ebac

Files

ca2e769a1b89a0fc5774478b70f5ebac
.exe windows:4 windows x86 arch:x86

1d43cd5e399f31c49a6f934c29809b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

Sections

.text
Size: 78KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rol
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE