aa940c066c9f066a857a69c4ea271af0635a8258ded8a49a27b64552635fafe3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa940c066c9f066a857a69c4ea271af0635a8258ded8a49a27b64552635fafe3
Size

4.6MB
MD5

8e80f318b3f0be819d868e33e33ce23e
SHA1

c08ffc2a7299f831d855291c9ec0c0447a45126b
SHA256

aa940c066c9f066a857a69c4ea271af0635a8258ded8a49a27b64552635fafe3
SHA512

040af73296bf6708a44d9978e968e8ebb55cae16dc144026be73a86bf5e04fd434db103eca0bb276e143bb648b0bf8cd7835ba6aba6b82336833eda9f60adebc
SSDEEP

98304:45oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:VxYGJ6bnpsSn9TwBeu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa940c066c9f066a857a69c4ea271af0635a8258ded8a49a27b64552635fafe3

Files

aa940c066c9f066a857a69c4ea271af0635a8258ded8a49a27b64552635fafe3
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ