0aaab8f5eb895598908f695af3a98fd8 | Triage

Sharing

General

Target

0aaab8f5eb895598908f695af3a98fd8
Size

11KB
MD5

0aaab8f5eb895598908f695af3a98fd8
SHA1

0de8f274e9d78e899fdaa1ea9072434d0ec488c5
SHA256

a4399a2ac18844ed772d2b6a54a9a3c597cc348363d1b92b772c38cb2979dd1f
SHA512

68d1c3d74b5ae945e1afda8e0c24f9af2bbe6d1f5993aaa64080a1d7d3507d477a02e9857a8bbb5a3291cf21527466773609d69f7c87580cce14a7e365291a15
SSDEEP

192:m6soNnYFWFalW91VJxboTsYI5YAocnC1pex1buaOkFw9jYLx17aOkFlBLx1IaOkT:h5BYar91VzM5p2uA1kv9MF1TIBF1ue

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aaab8f5eb895598908f695af3a98fd8

Files

0aaab8f5eb895598908f695af3a98fd8
.exe windows:4 windows x86 arch:x86

9c5323447afea2fdac76c509c29e6490

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
FindClose
FindFirstFileA
GetSystemDirectoryA
SetFileTime
GetFileTime
GetModuleFileNameA
GetCommandLineA
GetCurrentDirectoryA
WinExec
DeleteFileA
GetWindowsDirectoryA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ