aa6d4d3828ac2fc19ebc2c645784922a | Triage

Sharing

General

Target

aa6d4d3828ac2fc19ebc2c645784922a
Size

2.1MB
MD5

aa6d4d3828ac2fc19ebc2c645784922a
SHA1

df03b7125d619fb8cc05250d85f92efa956830a4
SHA256

bcf72535b0367a7d39c09cf40eaed707a575eb4cbce1ec10f411f8e69b075791
SHA512

ccaf63d2c0f16b0d74aef739f8112687382ebd9b0bc2fb90d16183e97ea4e8b393d5fd1a80b8d1b361eafedc2af2a55690b4ac741c06915eaa7a9c1ec6fdc74e
SSDEEP

12288:2wMcM+0sLvFZq3xSRe7BHvikYoyUGbKOxEXYGaYRD+bdGOBFybV8QtpROidv57E:bZqhae16CGbfxEXYGaKqMOBsbSAOidY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa6d4d3828ac2fc19ebc2c645784922a

Files

aa6d4d3828ac2fc19ebc2c645784922a
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 340B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 378KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ