caaabc3e507006cbd6f140ab01342097 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caaabc3e507006cbd6f140ab01342097
Size

64KB
MD5

caaabc3e507006cbd6f140ab01342097
SHA1

a32f18ca52194a54678edb2ffb37a8158306a89b
SHA256

509ca3bdd476edc273620d5b45d9a4de39cbabec9229deafe10d5f500a2b998d
SHA512

4cf0bc7ac635544f8f9a683525ffafd8618fca95f476668ad0a0c83c5bb7a87b850932c914ff577ec933ce877b6181028ffc42750958eacf64b270eec208c354
SSDEEP

1536:meGhUZSY5nvlaHd1+C0k+XuO41S/wRBms6rfpaA:/YUP5vG0kvF1S4RY9rfZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caaabc3e507006cbd6f140ab01342097

Files

caaabc3e507006cbd6f140ab01342097
.dll windows:4 windows x86 arch:x86

184d5e017a9373dd0dd64c61e3fc48a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

memset

gdi32

CreateDCA

user32

wsprintfA

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 13KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE