1aa78bb3faf8acd4f24c5826c5c01a34 | Triage

Sharing

General

Target

1aa78bb3faf8acd4f24c5826c5c01a34
Size

484KB
MD5

1aa78bb3faf8acd4f24c5826c5c01a34
SHA1

f107739ced7294014087d3e15884064d43510133
SHA256

9a81c14a87765bda0ba5c750196d3fb95e72b11b7f2d9fc5cdaa871b2be3a93e
SHA512

8480eecfae720e7a0dbb3e527d1941927393e365b15d5a7a5b4c34b1b9e2e8ae0bb847ed105b2814af0d7cb84f350aa523ec1853ae4944a4dabdd9843f4ca50d
SSDEEP

12288:okzATbugpN5XX7pWj0oiCj4v4NWzvABpb8qsv6j2:okzATiWN5n7pWjTis4viWz886y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1aa78bb3faf8acd4f24c5826c5c01a34

Files

1aa78bb3faf8acd4f24c5826c5c01a34
.exe windows:4 windows x86 arch:x86

27ff27a6a057b8fdff81750ec93d182b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlIntegerToChar

user32

GetActiveWindow

kernel32

GetCurrentThread

Sections

.text
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE