ca4bafb468ddee82d6f556a07cff4c93 | Triage

Sharing

General

Target

ca4bafb468ddee82d6f556a07cff4c93
Size

815KB
MD5

ca4bafb468ddee82d6f556a07cff4c93
SHA1

0674c67431788b40335b753b4048b78607e10727
SHA256

71fbaf25bcee1f641ecf78b6870636cf8bc30211520660049b186e366becbba9
SHA512

207b790b333903128d48faa97803bcb68bdc31fdb7fc48d038c35393cfaf07c6cf8712bda171fa473ab831f1b9cabc160d8bc5900b4fecd70302f11b00916961
SSDEEP

12288:JKXaevz54EPGyNGJQfaWrd0N+CCb3YPXx9BBsXJAgl1k8odxwyYKytRUsCnTHALw:Jm9rNGK+NyI9RL8oRYftHCnTHAZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca4bafb468ddee82d6f556a07cff4c93

Files

ca4bafb468ddee82d6f556a07cff4c93
.exe windows:4 windows x86 arch:x86

5bff72f81e735e4561815cd88fb2497b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
SetLastError
SetupComm
UnmapViewOfFile
HeapCreate
ExitProcess
CreateFileA
LocalFree
FreeEnvironmentStringsA
GetLastError
CreateMutexA
GetACP
HeapDestroy
FindClose
FindAtomA
lstrlenA
LoadLibraryExW
GlobalUnlock
TlsGetValue
MapViewOfFile

user32

GetFocus
GetDlgItem
GetDC
CheckRadioButton
DrawEdge
CallWindowProcA
CopyRect
FillRect
DispatchMessageA
DrawMenuBar
DefWindowProcW
GetIconInfo
IsWindow
MessageBoxA

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeIcon
DrawThemeEdge
GetThemeRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ