caa63ac920d251ab149f12cd2c22824a10dab35b11d68daec520dd9e45392f20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caa63ac920d251ab149f12cd2c22824a10dab35b11d68daec520dd9e45392f20
Size

1.2MB
MD5

1fdae226f7ec34a0d57e24e07a3bdeb9
SHA1

e59fad3d1d2cd69d7f0aa00563c0e492b3281272
SHA256

caa63ac920d251ab149f12cd2c22824a10dab35b11d68daec520dd9e45392f20
SHA512

de2b8a46169429adc50e50646ebe757bf2d616b9f01d42d322f2f161a7c97d7a9c436b2a1f6c4cf7c68d9d5770ceb5ce3143704cf9073b4e9f9b0ba2c1911ef6
SSDEEP

12288:mEtDt+QFAYvL7+3uhyMNfAsLfozPCOZ/5hNeGX9UZPTjOpMZaBY/x4b7GEt:LTdvvdBfAXTBhqt4MZaB3r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caa63ac920d251ab149f12cd2c22824a10dab35b11d68daec520dd9e45392f20

Files

caa63ac920d251ab149f12cd2c22824a10dab35b11d68daec520dd9e45392f20
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 553KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE