ca6ebcde05b0f2e8473a3afc5224cb16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca6ebcde05b0f2e8473a3afc5224cb16
Size

10KB
MD5

ca6ebcde05b0f2e8473a3afc5224cb16
SHA1

2d42fbac5f57a38e75eb7ffb7f1cec38d62654c3
SHA256

3606e6409d5cd9a8661f9d7a1e2ef5970b75092724d88ee3d01481e539382064
SHA512

bd2eff321969c31f2611b2fcd7d5b9fb7544591cc90463199462d1f11ac2cb870428658003f326e96ce9017d23d717368fda226ab1fa245821f25bdd0fda7e5a
SSDEEP

192:RxWFlhExu82mRbKp54wXvYeQyBZYspUAy3:aFlhuu9+Gp6mQy0spy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca6ebcde05b0f2e8473a3afc5224cb16

Files

ca6ebcde05b0f2e8473a3afc5224cb16
.exe windows:4 windows x86 arch:x86

99bed5d2f1166d42bf5ab32e1daed598

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
GlobalAlloc
LoadLibraryA
ReadFile
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 618B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ