5aacd9e5c0affd73324c86e6a7c9a5e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aacd9e5c0affd73324c86e6a7c9a5e8
Size

207KB
MD5

5aacd9e5c0affd73324c86e6a7c9a5e8
SHA1

3a71fe8691665986404ac147ef4d1863e5df0453
SHA256

ca8dda7993a7a673348911c41be28f018097a8d354b26b02f9dd60c8de37cdf3
SHA512

9bf9a2b671a0687c24e15af5a1b164d8aa4c4284d4f4aa10cf26eebc06b2c4b45acee240b9c24db8d6adc7eddb26ec7db0672f3faf93d1e4f6c53267fc7809bc
SSDEEP

3072:uamgNBfISNsu4vjjjGqaZLVpELqof6xAKFwXFgFVPlSNarvwHLvM:vB1SJvjjjtaZLVpELDKFaoroHLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aacd9e5c0affd73324c86e6a7c9a5e8

Files

5aacd9e5c0affd73324c86e6a7c9a5e8
.exe windows:4 windows x86 arch:x86

f28b03228bd9140b4db5f5efe7bc1148

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantChangeType
SafeArrayPtrOfIndex
SafeArrayGetUBound
GetErrorInfo

gdi32

GetCurrentPositionEx
GetBkMode
SetTextColor
SelectObject
SetPixel
SetBkColor
BitBlt
GetPixel
CreatePenIndirect

kernel32

VirtualAllocEx
LoadLibraryA
CreateEventA
ExitProcess
IsBadReadPtr
CloseHandle

shell32

DragQueryFileA
SHGetFileInfoA
SHFileOperationA
SHGetSpecialFolderLocation
SHGetDesktopFolder

user32

GetKeyboardLayout
GetMenu
IsCharLowerA
GetFocus
CharLowerA
DrawMenuBar
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetWindowDC

Exports

Exports

4YS8r7dyBYWcg
W4lFdRq@24
_VgdviCR1sig7@24
XbKCdbsvPWGN@24

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ