ca404ff986cb710343d59fc050099a0f | Triage

Sharing

General

Target

ca404ff986cb710343d59fc050099a0f
Size

20KB
MD5

ca404ff986cb710343d59fc050099a0f
SHA1

48fac2503aa22115e96430d3c8d65cc2dbf8e010
SHA256

78b6259e083ef19bd732e6e89fb2dedbf5b9e3fbc992a95615e9f539d94d70f0
SHA512

d8526656ca59e806959d0123f9f327ad9fcbd1182ed9c66f410501033d0e63175812564d84c5669be587fe11216a0e6b1d867fba226fae3b2471bd97e641d7c7
SSDEEP

96:9YpcWSvC4FYRBfTuo1tZQt/fq4lX0yS76Dh6nHEJz3VAYF/:5WSbF8BfK+01XzSeVikJz3V5F/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca404ff986cb710343d59fc050099a0f

Files

ca404ff986cb710343d59fc050099a0f
.exe windows:5 windows x86 arch:x86

c4f804922eea0994d27a3952a0b71a58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

user32

GetMessageW
PostThreadMessageW
GetInputState

ole32

CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocString

msvcrt

_XcptFilter
exit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
_exit
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
_cexit
__wgetmainargs
??3@YAXPAX@Z
??2@YAPAXI@Z
__p__commode

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 892B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ