ca8d32dea92ecd71470877f3bba4241c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca8d32dea92ecd71470877f3bba4241c
Size

2.6MB
MD5

ca8d32dea92ecd71470877f3bba4241c
SHA1

ba34575f4ffc44fd2e1459578ddbc6b3a61cdb4e
SHA256

dc3da1bb892b3cf238f6daddc56472e5d63790797165c6d52c574655ebf9c510
SHA512

c3f9e2c38ddb928a5abde4e390dd9559ec5688f7d254a8a9a011ad06ee37b4a8e6d358439ef508d28b6a7d634d8988762ee58109e22608ed526c9497a9143a65
SSDEEP

49152:aLVs1iF/kquLOk6mL1lUV1Pqi29JdHKNK/9dLWYSHLerCZWm42DCcn8ih8:YF/kFz6mcXDqX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca8d32dea92ecd71470877f3bba4241c

Files

ca8d32dea92ecd71470877f3bba4241c
.exe windows:4 windows x86 arch:x86

ff5e93a96450d38833bbeb44d42e3871

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
VerSetConditionMask
GetLastError
ExitProcess
GetModuleHandleW
GetModuleHandleA
FormatMessageA
VirtualAlloc
GetConsoleCP
EnumCalendarInfoA
DosDateTimeToFileTime
GetCPInfoExA
OutputDebugStringA
VirtualLock
ord37
GetCommandLineA
EnumResourceTypesW
GetVersion
lstrcatW

dsound

DirectSoundEnumerateW
DirectSoundCaptureEnumerateW
DirectSoundEnumerateA
ord8
DirectSoundCreate
DirectSoundCaptureCreate
ord3
DirectSoundCaptureEnumerateA

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 5KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3.4MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ