Aaaaaaaaa[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Aaaaaaaaa.exe
Size

120KB
MD5

42f0055c815d14e4bf30e9f546dec286
SHA1

fb8d5d088d71bf7c99b8b5f7878eb94f2ddc1fc6
SHA256

3a7c51319301c88c1a14f471ed9f1720793cddb4275bcb8dbeb86443a812f633
SHA512

c7b6e7591ea319229b400a76e84b8cfa1eb44593042a35cccf8417d7d5a0e09ab482c582a2e4b6ab6b98919e070b3d39b3f25eaa1231f34f4ddfb859960c7375
SSDEEP

3072:yrWbsnvL18dJVxNYlHqjS81gCM5xCr864aOS8:yrW6Lq3VxN6QSEKvCr864aOS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Aaaaaaaaa.exe

Files

Aaaaaaaaa.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

pJ$>]V}<
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ