ca6771c797491861c1c98caae4189da7 | Triage

Sharing

General

Target

ca6771c797491861c1c98caae4189da7
Size

165KB
MD5

ca6771c797491861c1c98caae4189da7
SHA1

8c75fbde2b3cb70bb53f79dac78c8b0f6963c6c9
SHA256

285f3a4126e84a4bd565c69dcb0f89a8cbd4dbfa68d4796cbd459024d1562a11
SHA512

64714a233cb001bcc6034c6a3938b19ff154124b4179e84b6c0f98492c50d046735241d6e21240df3f39ca9f4fe43326fc31578744fc9720e5bd8e03f99e30d6
SSDEEP

3072:yTdljQQkuZtM3MGFw94BkjxATgbSAufTY0s218zCP52BOAh:lQDFiajaTMQrVsS1W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca6771c797491861c1c98caae4189da7

Files

ca6771c797491861c1c98caae4189da7
.exe windows:4 windows x86 arch:x86

47c42229b3206ef874fc2d68c7b3971b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowA
FindWindowExA
GetMenu
PostMessageA
SendMessageA

kernel32

CloseHandle
CreateFileA
ExitProcess
GetTempPathA
LocalFree
Sleep
WriteFile
lstrcatA

shell32

ShellExecuteA

advapi32

RegCreateKeyA
RegSetValueExA

Sections

.text
Size: 160KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ