83caca24288975db78a7eb3372d83919f0826e385793d5aebfb91c15b4fa052e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83caca24288975db78a7eb3372d83919f0826e385793d5aebfb91c15b4fa052e
Size

2.3MB
MD5

502c4a2161079933c45532e4f1b8db93
SHA1

1ec69dcdbfbe16cd3155b24fc773a8c64b622072
SHA256

83caca24288975db78a7eb3372d83919f0826e385793d5aebfb91c15b4fa052e
SHA512

a6d2391344e18d4662e64a3664d3b7da728569485e99d83f86027c1236ed89621a88440825c35baad53726b43ca3aa976267a037c3693dd4bb507ad9d87d1e2b
SSDEEP

49152:Ozbt58AzAPZY0vGwKFWnvXfxqmwECvRpW3LKnFuSjSSrxVx:kbIEAPZYsdKFWvXfxopbWKnFuSb1X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83caca24288975db78a7eb3372d83919f0826e385793d5aebfb91c15b4fa052e

Files

83caca24288975db78a7eb3372d83919f0826e385793d5aebfb91c15b4fa052e
.exe windows:4 windows x86 arch:x86

89048a25c237a749f3f8b6d613e948ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
_lread
_lwrite
GetStdHandle
ReadFile
_lclose
_llseek
_lopen
SetConsoleMode
GetConsoleMode
CloseHandle
SetFileTime
CreateFileA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GlobalAlloc
lstrcpyA
lstrlenA
lstrcatA
_lcreat
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrcmpiA
MoveFileA
GetModuleFileNameA
SetConsoleCtrlHandler
GlobalFree

user32

wsprintfA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE