8ca359a03ab704b7d6552309d14749d637ddd1627258048ca44c0563955ed53c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ca359a03ab704b7d6552309d14749d637ddd1627258048ca44c0563955ed53c
Size

67KB
MD5

6d069451d5d26c32bd6903e4616c35f0
SHA1

df54c32e771bd54a65d2d5d427cfbb10c5d377c0
SHA256

8ca359a03ab704b7d6552309d14749d637ddd1627258048ca44c0563955ed53c
SHA512

aad9cc9c9bfaa200e361df5d83b74607a17cd11ed6e0a71bc9b7e6461573a26d30f036c9c7e3ccb6898ab5e8770a9d95e0354a65e2e59fe5ddafd7b2e0b7a7a8
SSDEEP

1536:KCS0heb3NcmdXAKJ9x+RQB4PbB/SmmykzxFIgmWAZuy0setPzE:zgfQaePBqxjVFS/uy0p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ca359a03ab704b7d6552309d14749d637ddd1627258048ca44c0563955ed53c

Files

8ca359a03ab704b7d6552309d14749d637ddd1627258048ca44c0563955ed53c
.exe windows:4 windows x86 arch:x86

bf157854ad8b901f26f7df7c26fe4c18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesA
CreateEventA
RtlUnwind
LocateXStateFeature
CancelThreadpoolIo
SetDefaultDllDirectories
TermsrvGetWindowsDirectoryA
ResetEvent
GetUILanguageInfo
SetThreadErrorMode
VirtualProtect

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE