6aaf9725f60a48c7a0636030c0b1ecd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6aaf9725f60a48c7a0636030c0b1ecd8
Size

66KB
MD5

6aaf9725f60a48c7a0636030c0b1ecd8
SHA1

0da02e6cafc8599c152647293bcf7d7c9ad410be
SHA256

23e129db693b71317a5fc3560d8db36214e7105305c59be1a71c663b36fd5dae
SHA512

9da59c525f5bd8354f0082c25dbf24f77a9d9a331dba5a2e6e726ad6d2ce8f904e2b9f5a1ccbe59d50876d28f2b7e9acb5e65b44d10e29145d45c6431c4893b1
SSDEEP

1536:Gxqx9RW1zDlROwBdKqCrIMqnl3Sd9cJJMlcTq:Gxw9RW1XjjKqnlCd9SO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6aaf9725f60a48c7a0636030c0b1ecd8

Files

6aaf9725f60a48c7a0636030c0b1ecd8
.exe windows:5 windows x86 arch:x86

0528d5d4806a87a84e39f89f024b2cab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
CopyFileA
GetTempPathA
GetSystemDefaultLCID
CompareStringW
DeleteFileA
GetCurrentProcess
GetModuleHandleW
SetErrorMode
GetExitCodeProcess
GetStringTypeW
GetTimeZoneInformation
SizeofResource
LoadResource
lstrcmpiA
WideCharToMultiByte
GetModuleHandleA
VirtualProtect
GetUserDefaultLangID
IsDBCSLeadByte
GetLastError
GetStringTypeA
SetThreadLocale
GetConsoleOutputCP
GlobalLock
GetStringTypeExA

msvcrt

__p___initenv
__set_app_type
_initterm
__p__commode
_controlfp
_XcptFilter
__p__fmode
__getmainargs
_exit
_except_handler3
_adjust_fdiv
__setusermatherr

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ