cae0025fa665c55de4807e52a7b80380 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cae0025fa665c55de4807e52a7b80380
Size

215KB
MD5

cae0025fa665c55de4807e52a7b80380
SHA1

61f708b7c227f349851bed9b113f8fff7dd6af48
SHA256

878186d200b31b75afcc48639fd82680aa45f516e96a9f4d700ed29eeec60a51
SHA512

143b74fcc71facc0f3eef5d28d2c6caa1f7a59c87e433a316df72cf8b262223e9fca3f589039f4da3b40b2fcd409b46edd18268b10acf25a39306770ce97cbf3
SSDEEP

3072:GK1Sgp3aLqsLz+dQIoHCWYRVrwi/NOsbTUTkcPlQz4+4p2aRTTHr:7kq3az+dEedDFHTUTRuzIAUTf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cae0025fa665c55de4807e52a7b80380

Files

cae0025fa665c55de4807e52a7b80380
.exe windows:4 windows x86 arch:x86

3ea28f40f8d6e00581d140004e7be782

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
LoadLibraryA
GetStringTypeA
CloseHandle
LCMapStringW
GetVersionExA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
MultiByteToWideChar
GetStringTypeW

user32

GetWindowRect
GetWindow

gdi32

Rectangle
CombineRgn

advapi32

RegCloseKey

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ