13aa728816560a3027589dc2adc58735238ecde498bd032ad7075041dc307141[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13aa728816560a3027589dc2adc58735238ecde498bd032ad7075041dc307141.exe
Size

5.3MB
MD5

d74756112bff9ca83b06cee9eb64a745
SHA1

0b446420118fee3e637820302b7c4f87963c0696
SHA256

13aa728816560a3027589dc2adc58735238ecde498bd032ad7075041dc307141
SHA512

88a64db00d17b75a435b621bebc9c7ac481a54d88e21c38babb6c91f4e5051ff2b1c7a2a410253b546f8582ebb5810481ea6d2e3d94d80225848df8b5705d835
SSDEEP

98304:X7aOak1GMCI59TNQ68qfsnX511hJkAhmbxSt8TPcltMiEbC:fa909TNhfsnX511hJkeWItCkgi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13aa728816560a3027589dc2adc58735238ecde498bd032ad7075041dc307141.exe

Files

13aa728816560a3027589dc2adc58735238ecde498bd032ad7075041dc307141.exe
.exe windows:6 windows x64 arch:x64

3e108abbf5b70ba74c91cc0339a005dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetLastError
GetConsoleCP
WriteConsoleW
VirtualProtect
CloseHandle
ReadConsoleW
GetLastError
Sleep

comctl32

ImageList_BeginDrag
FlatSB_SetScrollProp
ImageList_Copy
ImageList_GetIcon
ImageList_Add
ImageList_Merge
MenuHelp
UninitializeFlatSB
PropertySheet
LBItemFromPt
ShowHideMenuCtl
InitCommonControlsEx

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceExW
SHHandleUpdateImage

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ