0aa68d3b4a22e33160b0962a9c2a4591 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aa68d3b4a22e33160b0962a9c2a4591
Size

181KB
MD5

0aa68d3b4a22e33160b0962a9c2a4591
SHA1

e8184224a0bb58ecb6d4b6a527f724c071876b82
SHA256

28f5935561ab08264e4f4863ace60a6b3cf4d80a0b4df42a3b9ff5fa0d731a81
SHA512

1b800a34f8bf7e68dffa99df6d1faeb05b9bed5b400f477bca22e9ae45230b6ed375ee8e3007851d3dfeea4b67b76559e754710fe51853a832bb24940d1aa801
SSDEEP

3072:rDcgh4yFm1eRPMC1FPcehN1J6aZt+ZpuV+0Bner/s7tr+N6heSbwL6S4GY1:6yFmQkkX18aZtSuV+ceLs7tr+3S7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa68d3b4a22e33160b0962a9c2a4591

Files

0aa68d3b4a22e33160b0962a9c2a4591
.exe windows:5 windows x86 arch:x86

f7015f33371f4825d710818cc0f205e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetForegroundWindow
IsCharAlphaNumericW

kernel32

lstrcmpiW

Exports

Exports

?FinanceAssist@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.t2
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.t4
Size: 512B - Virtual size: 442B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ