ca99fd7279ed65c625758407af8d1509 | Triage

Sharing

General

Target

ca99fd7279ed65c625758407af8d1509
Size

25KB
MD5

ca99fd7279ed65c625758407af8d1509
SHA1

9491df00a34bf900160519584d23de24f8cdf8ec
SHA256

8ca0dec5b362fac58066a7a0c5750a0c95c59142ae261482bc658d0177f14f8e
SHA512

a7d6d9d409f7c01303e08c14d2a92ba206cb592d839608a89c26636ddb7bb0fe57bb9f5b8c4bcafa5038085badc79be684219670086dc73cae983bb937aa7b8c
SSDEEP

384:gCYvMskJfXxcukZGXSd1UC2xNP5JpxqDtxv2iYli:XsafkZGW1UjdlAZYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca99fd7279ed65c625758407af8d1509

Files

ca99fd7279ed65c625758407af8d1509
.exe windows:4 windows x86 arch:x86

51b1dd8cc5f8d43fd62568e1569c950c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegCreateKeyW
RegCreateKeyExA
RegOpenKeyW
RegEnumKeyW
RegQueryValueExA
RegOpenKeyExW
RegCreateKeyA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ