ca5a312d25cb794b422031f0492754cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca5a312d25cb794b422031f0492754cc
Size

87KB
MD5

ca5a312d25cb794b422031f0492754cc
SHA1

56aaa8cb675bcc54312b9ef3dccd65a42cd8661f
SHA256

c251936585706f8479aba1004b12b53cc729a9d96d346b5ba80049d3e656bbe2
SHA512

a568ac8a90013d7aa10f6236131000f3fe6ad4ee044c9e31a6d90ce800318cb812550fb2f6ae66a088f1495754a55cf961998ea53e5e8b99fe8547e4b1ca083c
SSDEEP

1536:qUB01qiIc7TEVLkx3si6I/GPQnTRIgz31ZtD8nlkD9k+q4bUtPvpf99hnGrA//k4:qUB01qhc7TEVYimGPOFrDGkD9rqWUtjv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca5a312d25cb794b422031f0492754cc

Files

ca5a312d25cb794b422031f0492754cc
.dll windows:4 windows x86 arch:x86

799d800454393c30e0a9dc1d4a6b4472

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ShowWindow
ShowCursor
SetMenuInfo
LoadImageA
LoadAcceleratorsW
IsCharLowerA
GetDC
EqualRect
EndPaint
CreatePopupMenu
CreateDesktopA
ActivateKeyboardLayout

kernel32

RtlUnwind
lstrcatA
TlsSetValue
TlsFree
InitializeCriticalSection
GetPrivateProfileStringA
FreeResource
CompareStringA
lstrlenA
lstrcmpiA

oleaut32

OleLoadPicture
OleLoadPicturePath
RevokeActiveObject
SafeArrayAccessData
SafeArrayAllocDescriptor
SafeArrayDestroy
SetErrorInfo
SysFreeString
SysReAllocString
OleIconToCursor

Sections

.text
Size: 20KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ