caee76754c2008d6aaa6c52f54ae06f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caee76754c2008d6aaa6c52f54ae06f4
Size

3.3MB
MD5

caee76754c2008d6aaa6c52f54ae06f4
SHA1

ba965f2c11532eb35e7906954ba8b490c8b561d2
SHA256

46237b277db2c05a129e6be0d1d7cb99c695e7020db26372bb130876508d9474
SHA512

0f12eb1d466bbb0652fecf02448609b577cb010751966c87d62779af146c55ed744c198287548a16a0c37a3f90a4a7c9e9637d4f892c0f5fb90e3c549712228c
SSDEEP

49152:p+k5PsV9W33YNvv+1L+oDMYgtM/XQ8JigFBIgGBnswNouVIfo3wNLpzCaiyNPLEg:x5UvX+hXzgtMx0gF+JokG24pzCSLZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caee76754c2008d6aaa6c52f54ae06f4

Files

caee76754c2008d6aaa6c52f54ae06f4
.exe windows:4 windows x86 arch:x86

16ddf9b1390c8bf7f7fde96c95b68f26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

Sections

CODE
Size: 3.3MB - Virtual size: 15.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE