ca623dfc56578151c7cafe1278bd66d0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca623dfc56578151c7cafe1278bd66d0N.exe
Size

25KB
MD5

ca623dfc56578151c7cafe1278bd66d0
SHA1

7a1ab4bc9112ff8c9c6b4438431e5b71a3c66e07
SHA256

ea6e3c59b399651eeebb13b07fda4a9f18cd34e1699ba611164ca3f26c4d0add
SHA512

d4e12f3cfbb51b2d4f2f4f7a2e376d47c52492089a322e50986d289e041121915d8459ee58ae44518194ef648bf3bf8b8158ab97e404f5767ceaaf6a7e54e588
SSDEEP

384:YQSNlU+23nfgpUaESD6IHTH7MZpiJ87fJ2ltutl4i8lIgLqAW/gcas0e+zNQf1Y:zSMvXfgpUaEc1zH72p7lQPS91Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca623dfc56578151c7cafe1278bd66d0N.exe

Files

ca623dfc56578151c7cafe1278bd66d0N.exe
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ