03aa13d227680d70e05496b36e3f4f77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03aa13d227680d70e05496b36e3f4f77
Size

145KB
MD5

03aa13d227680d70e05496b36e3f4f77
SHA1

404cb0a62da465ee3f018ff69bae542816f50558
SHA256

bad8c7d7c0b38b30b6ee13b7f5bce564e3aba1ef5faf72059ce8b3cb40682b14
SHA512

4b558240d8b8935070501da680e699b35712ab849c05eaa822aa399f84c85ee771f79c4c99854cff535805e3e92024e98d39ef1ef654b1084a0a784a3027d40f
SSDEEP

3072:EHFGt2E/o3zNyGiw/Ow79BLQ+j7/wZMb5FUY2rhA0FwGEZcLFvAqiD:Ex8Gil+sosZu5yzrdFw/ZcLFAqU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03aa13d227680d70e05496b36e3f4f77

Files

03aa13d227680d70e05496b36e3f4f77
.exe windows:4 windows x86 arch:x86

9a609a31f2199d70d016da8b478827c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
Sleep
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE