cac047a17718dcb437e076247935061e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cac047a17718dcb437e076247935061e
Size

25KB
MD5

cac047a17718dcb437e076247935061e
SHA1

311c3369998988dcc683e9e3cf8c3f21b5d9f6f8
SHA256

0e3c6bf1b026663794da7b37beb2802c3c93ef41a6e741bc11a3caef3663b13a
SHA512

312f6dcfe8669c757eb1141aca42612a921e9a2d6314b4d488b80c612855886e9cab84de7823c967899e621429ab666aca9ad15348519e9f5aaccc103ddb07e1
SSDEEP

768:Duz2AR2bZyjTHliu8vQ2DUf9l5gDX05/gbG:a6AwbZyXHliub2DUFl6hS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cac047a17718dcb437e076247935061e

Files

cac047a17718dcb437e076247935061e
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE