Sicap2024InstalaComp1[.]exe | Triage

Sharing

General

Target

Sicap2024InstalaComp1.exe
Size

5.9MB
MD5

2b17db4e13154db62ce78441b2ae3113
SHA1

ea1bfb5627ef5d2329956e82c9cfb4a41e1c9894
SHA256

02e6ecb67ccd6f0bffd8470aebafaa37673749c7a9b97cf11e71e49e83366545
SHA512

69279a34ffe1bbf66213ba2a08c4f55952ab4c0f49b743bdc4f2b2ed84e31921e6ba572f8a6943740d646ecd83d1f48331a57bbc17367bb4c61afcce9c62d427
SSDEEP

98304:TAe1fnwy5MxhiGQ/Hts2YmgrfN+fiL4njS5jVX4WHEb4m9Y9zPmLEG9YFHkM02m+:t1fw3xhI/H6D+aL+jS5jk8CEGmF301+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sicap2024InstalaComp1.exe

Files

Sicap2024InstalaComp1.exe
.exe windows:1 windows x86 arch:x86

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ