ca3c46ef5d48330b340ad1f83ce2fc02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca3c46ef5d48330b340ad1f83ce2fc02
Size

161KB
MD5

ca3c46ef5d48330b340ad1f83ce2fc02
SHA1

ac4a8045d62d413d3e2c900fd67b6cddc9091349
SHA256

bb0b19049ea81250117cbd4104716987c83d60b9c6502e6e07eca710024fc858
SHA512

3e56478e3c5d31bb3ce3cfdb2260ed8def24459dec3442cb73dbacacc2ad5298ba49e0867def0ce65870afd0006a818345586ecba66b4e08954f26d23f2f1903
SSDEEP

3072:CyZasnArR3jB9zmt6OYtT4dTH/8mUFtZz0KX6UjeVHn:CSa++BcttYt0Ff8nl0fUj4n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca3c46ef5d48330b340ad1f83ce2fc02

Files

ca3c46ef5d48330b340ad1f83ce2fc02
.exe windows:4 windows x86 arch:x86

3efcc7dfaf9b819069d29927a0114378

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
LCMapStringA
LoadLibraryA
CloseHandle
ExitProcess

user32

SetWindowLongA
CharLowerBuffA
CreateWindowExA
CloseWindow
wsprintfA

advapi32

RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegQueryValueA

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ