0aae13aad682f3fa7d7df86a19885850 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aae13aad682f3fa7d7df86a19885850
Size

64KB
MD5

0aae13aad682f3fa7d7df86a19885850
SHA1

4d505e8a4886bbee3cb1ec32ea565ed26ab83d24
SHA256

39dfffc90c7d5da93f5fe9362f9d356a4e44b290dc909189b9f83dad06504a35
SHA512

d1a239c59018e5e25a81d212027cd5837a8288fc93936e08a82e2b900e0e19d4d86c648c11925f86d4135434ac22d84f1c409a3ea3e3b5aa500e493b0bc9e14b
SSDEEP

768:KZIhuFg73+GhFy4VjnDitRIkZJqj6+J3nQ8iyKhiBphFEWw10nVSM:cIhCg7OiF7Zj5xlkiTEIVP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aae13aad682f3fa7d7df86a19885850

Files

0aae13aad682f3fa7d7df86a19885850
.exe windows:4 windows x86 arch:x86

19ef4b0522b29b44736e76f9d5288601

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
LoadLibraryExW
GetModuleHandleA
TerminateThread
SetEnvironmentVariableA
FindResourceA
CreateMutexA
CreateFileA
HeapCreate
lstrlenW
SetLastError
ReleaseMutex
PulseEvent
GetConsoleMode
CloseHandle
GlobalUnlock
GetStdHandle
Sleep
GetCurrentThreadId
TlsGetValue

user32

DispatchMessageA
IsWindow
DrawMenuBar
GetDC
CopyRect
GetClipCursor
DrawEdge
GetDlgItem
CallWindowProcA
CheckRadioButton
GetIconInfo
FillRect
SetFocus

apphelp

SdbFindFirstTag
ApphelpCheckIME
SdbGetDatabaseID
SdbCloseDatabase
SdbFindNextTag

clbcatq

ComPlusMigrate

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE