caf8b4214143e1440cf6f2fb2d64de47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caf8b4214143e1440cf6f2fb2d64de47
Size

484KB
MD5

caf8b4214143e1440cf6f2fb2d64de47
SHA1

ec9d640b07c5fcb6e4074a95c8a0057b4b2d0f3f
SHA256

a68c8ed6fcf81a359c25a3181328d4e7560b5f5e2da5f2463faa59b4ede673ec
SHA512

962176c0947a72daab77ba0f9f4e33bcbe68fa2279fbbfc766309c65c3e6ec0832192991c1a1d820b6a70fa9db46769f9d48674784546ca1a31bae4439e61c4f
SSDEEP

12288:vyM+1J3KtdgJ9ywY+iaPiVM2a1bvYvo4bG:aMDdgpJHN2QbvYA4bG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caf8b4214143e1440cf6f2fb2d64de47

Files

caf8b4214143e1440cf6f2fb2d64de47
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

e3e5af368e8b6421f433c2987d2d3b19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarI8FromR8

ole32

CoTaskMemAlloc
UtGetDvtd16Info
HACCEL_UserSize

user32

GetClipboardViewer
GetActiveWindow
GetDoubleClickTime

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE