7aa955685d313f395d1fef2f6141de5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7aa955685d313f395d1fef2f6141de5e
Size

208KB
MD5

7aa955685d313f395d1fef2f6141de5e
SHA1

e20c2095cb592fdff2d9a420d5f1f33534591757
SHA256

4068fb1971787f5e3378648d46b1322e34a149e69196db72e848f8037e03dfd7
SHA512

28228c895a004376df5c9b1a20cd4ba50c743fcd4d7f97540e738eacf40edf0d7ef8782af109d79f11b8176cbeab76d718fa7182c94ab13d1ec7bfaf47276cbb
SSDEEP

6144:ul0n6auYDDyMHVG68iwyvQs3KMbow19u/USd58xvYe:Jn6auY1GwLbxkd+pYe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7aa955685d313f395d1fef2f6141de5e

Files

7aa955685d313f395d1fef2f6141de5e
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE