ca3f68ef22435b0a40c2be84539db88b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca3f68ef22435b0a40c2be84539db88b
Size

25KB
MD5

ca3f68ef22435b0a40c2be84539db88b
SHA1

4ff91ad2e2dd0f2c2c64aff70b3061d3b4ee64f0
SHA256

c55d375c2266f2f985a72dcf3ee3ce2080f0a4e5f00d2dc172806d08deac708a
SHA512

fc1f78fd2c70e17fb6a4b5441965ca0526c009a914ad9e4c9ab9bbb61a3202bb56e567e14bc9c23e3d3c43acfb6e77f2bdda8c2f0040baa4c502bc543dab2f07
SSDEEP

384:7HaYzg35x7dw4jRveVhAFXNCE1/ohkSV5Pwz9+VLcbvMcFPwkF+vibG:73g3L6SoVSXNCrzPC0V+Mcb9bG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca3f68ef22435b0a40c2be84539db88b

Files

ca3f68ef22435b0a40c2be84539db88b
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE