caca4b1b28705e303b7fdacc26a6b8b387d29a0e05056bc752ad1c03a2f87f14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caca4b1b28705e303b7fdacc26a6b8b387d29a0e05056bc752ad1c03a2f87f14
Size

439KB
MD5

299bd7533ddeeff7b645b2a5da32cbb9
SHA1

384b56bf523b8249c9bc5f049b861dfc9fd0da2c
SHA256

caca4b1b28705e303b7fdacc26a6b8b387d29a0e05056bc752ad1c03a2f87f14
SHA512

8ae515063858e5f5df34abb923ae15016b882d04304f6313cae05cbe30c4d643357b555bd9fca6c122af16359caf161a67fc79a99df1644d3b525610e155b4cd
SSDEEP

6144:GvznctmE2RtEBOocbK0Q8g53vTRnd8yoU4pKdCKsdG168e4TT2r6y:G7num7TE0KaWLREd2CNII8e4TTZy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caca4b1b28705e303b7fdacc26a6b8b387d29a0e05056bc752ad1c03a2f87f14

Files

caca4b1b28705e303b7fdacc26a6b8b387d29a0e05056bc752ad1c03a2f87f14
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

__DebuggerHookData
__GetExceptDLLinfo

Sections

CODE
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 409KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ