Aatch[.]exe | Triage

Sharing

General

Target

Aatch.exe
Size

13KB
MD5

e7489df1b705021efba74ee65fa7761d
SHA1

96b5f2cdb4fe43e12ea02fd1ba95fca84e196e3e
SHA256

7bb1f961ffae2e3ffa422d151c2290d281b02f8be9279a52bae179fb47d817ce
SHA512

cb51dc678e292b6d1cc9e7a0ca10b8f2c90dc6bd21fbba5bd0f30663acdf47282e7cd6f442a8ba6cea2fcc430a6f9175693d4fe02a345c744768c2591da3d66c
SSDEEP

192:dze8OfffffhasFbb7eApmL9eenvEd/oYnvS/Ywm:dzeLfffffhFbbVpmL9eevejvSw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Aatch.exe

Files

Aatch.exe
.exe windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ