ca6811023ec3390a2c27f80494043e7a | Triage

Sharing

General

Target

ca6811023ec3390a2c27f80494043e7a
Size

76KB
MD5

ca6811023ec3390a2c27f80494043e7a
SHA1

d5b2621a0a82038497cfed19b272e51f72f41dea
SHA256

1595bcbe4f53adcb16cbd7688915b1fdda0217e89be745940da418283d933b81
SHA512

674c8efa1df763a56ba938442530221ed76fb7cd234f8ff3208343df3956e29bad02dec1d002d1adace1ecc9f03653ce022f259d52de676c1f8c4d5ef38aac14
SSDEEP

1536:RvHyiFqlYe6LZmXT6T3fw7NS2r0+cdqyuV6BQ6boZ39n36u5FyvDMR5LkYgFoY8D:wlx4CWCazO2eM1eoIjvicUkA8Hs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca6811023ec3390a2c27f80494043e7a

Files

ca6811023ec3390a2c27f80494043e7a
.exe windows:4 windows x86 arch:x86

ffef18134b4039df58378a2f11d92a97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
GlobalUnlock
EnumerateLocalComputerNamesA
SetComputerNameExW
SetDefaultCommConfigW
LocalFree
GetProfileSectionA
SetupComm
FindNextChangeNotification
FindFirstVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE