1aa1a874590dc1e3e4ce6f02e4ac048b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1aa1a874590dc1e3e4ce6f02e4ac048b
Size

70KB
MD5

1aa1a874590dc1e3e4ce6f02e4ac048b
SHA1

5fb233d81dfdec598109cdf8455be505007a271d
SHA256

0f3f6dfb6209976d6ff1b61767177db0b868a9b0c2edb18574b57de1bf1b89e0
SHA512

556f963ca5bf1f17ff96f49e740340cda26e1213d4b30ab996dd80002fda9cd0c67f89894bb546bd14dcd8aeb0006b6874158e39727353304bf17d8813d799e2
SSDEEP

768:v9n13iOxfcr9NWt+rDT5JqBM3ykPDs3CBh2olaH4/cd1kZG1CWE02i1wzLwYbj2g:RIG+rPf3yk4o8H4oEzLjbC9Vc2k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1aa1a874590dc1e3e4ce6f02e4ac048b

Files

1aa1a874590dc1e3e4ce6f02e4ac048b
.exe windows:4 windows x86 arch:x86

d4541550b46f5816921f2aff51821bcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

FaultInIEFeature
GetClassFileOrMime
CoInternetParseUrl
ReleaseBindInfo
URLOpenStreamA

comctl32

ImageList_DragEnter
DrawInsert
ImageList_Remove

msvcrt

memcpy
memcmp
strstr
strlen
strcpy

kernel32

CancelIo
EnumTimeFormatsW
ExitProcess
BackupRead
DuplicateHandle
CommConfigDialogW

Sections

.text
Size: 43KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 512KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE