caf72693f5fbc2e16d467340f4f46c98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caf72693f5fbc2e16d467340f4f46c98
Size

76KB
MD5

caf72693f5fbc2e16d467340f4f46c98
SHA1

ee836e7dfe32e3a436ba4eca1780b7a5d7342b55
SHA256

139bacca93b07391781d966f815a11f7064e4e40a4a36887a02f9ea60fb4589a
SHA512

0bca188d771602329981f7e00dbda05f3486bf1f82421634692ed74ac17f73beaf3ca5d4cb2687299bc4ec8b7a80c485a3e3a36444daa8c0e4cc6743f3daf29f
SSDEEP

1536:fFWNqh/HcJAFNb2ueO6NK5JfSQ9oZw1bzrbgWn3CRXxdI2Zfl3CJDVi1zoUG5MQ:tWi/HcqP2ueO6NKHLKwpXn3Q35qVi1zu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caf72693f5fbc2e16d467340f4f46c98

Files

caf72693f5fbc2e16d467340f4f46c98
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.XPack0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 75KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE