AimAdded[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AimAdded.exe
Size

1.4MB
MD5

13065d983524842408ba39509101d261
SHA1

1563acbe2e516d33d8d4fbe6ee33f811bc657cd5
SHA256

14256b1acc81449974cbdcb8f958a914ecd2d1faa6e93dbf64770d8633389489
SHA512

0ff9ebc15f5405fb563acdedbde6bd63463f697f356064eb4cac2aabfcde7db77b043f0be36b0ee995c8c5a995ebde2acf2b640cf7a93ae383dffe1daf6e7097
SSDEEP

24576:cGGFgq+7phB7Znsf9xgxYrT3CSybZmpdxKj0K+m3wiR2gwHxjul135t:cGGF9+V/tIJybUpEf+6BInHxiPJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AimAdded.exe

Files

AimAdded.exe
.exe windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE