cacbdc95693c3cf5322b353a3d7fc659 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cacbdc95693c3cf5322b353a3d7fc659
Size

417KB
MD5

cacbdc95693c3cf5322b353a3d7fc659
SHA1

6ad084aedb7fe4e18691e5a331ddd0f41fc81642
SHA256

cd78066c9465e234ed57adf95fc11b7bde63582769ce0a887e93cf8edb2e8d9f
SHA512

85cf1cf3d9e77ba2ef7041040bfec1aa1d737b55241ca51e634b802ea7165e68054a45b6e720d22ae47d7afd746606882b08e23f342feda769637284e3a232cd
SSDEEP

12288:4JLc+aQfOSNviF/5kbWa4+OeFgD7w2G+Rfh:4hcOf3id5Va4/7w4Rfh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cacbdc95693c3cf5322b353a3d7fc659

Files

cacbdc95693c3cf5322b353a3d7fc659
.exe windows:4 windows x86 arch:x86

012237fdc9552ef7e5d7c5a6d3ee45b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

urlmon

URLDownloadToFileA

Sections

.text
Size: 30KB - Virtual size: 552KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE