5aa60e85af3bfe03745c860fdd02d665 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aa60e85af3bfe03745c860fdd02d665
Size

132KB
MD5

5aa60e85af3bfe03745c860fdd02d665
SHA1

6428bf271d6b1b64010716fd1dd9ad7f61ee6709
SHA256

eb0ace8776076cd2f8dfd4fecde6f62453c59456c3c988146fd4ddc778b8c4ae
SHA512

ce22175d0e5b1b5f6af2a3989c636318487539381ec9709bb2039252bcf74243bcc7855f965de2b93d0725f8ce4a7add577ad4b0bec05cbd91331563787a3fe0
SSDEEP

3072:RNBHSJAzo3JJdBr5qkUH3bZ4rLWpH3i/+:nBWjXr8rrZ4rCpA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa60e85af3bfe03745c860fdd02d665

Files

5aa60e85af3bfe03745c860fdd02d665
.exe windows:4 windows x86 arch:x86

98662ad7a0cb48c8738ebe83172bbb84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
GetThreadSelectorEntry
DeleteVolumeMountPointA
EnumCalendarInfoW
SetComputerNameA
VirtualLock
TlsGetValue
HeapFree
BackupWrite
FindResourceExA
LocalSize
CreateEventA
Heap32First
GetProfileIntA
GetTickCount
CancelIo
HeapAlloc
GetComputerNameExA
GetConsoleAliasesW
IsBadStringPtrA
VirtualProtect
GetConsoleScreenBufferInfo
GetThreadSelectorEntry

Sections

.data
Size: 8KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ