2aaaf4e59dc698888f4f6a38fc4c9f79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aaaf4e59dc698888f4f6a38fc4c9f79
Size

17KB
MD5

2aaaf4e59dc698888f4f6a38fc4c9f79
SHA1

8a9ef5c23aea4afe4162b1b299d3d5d77380f4b2
SHA256

43f30ce4e02cd24c1de2cfb70a277bddd1fc859d5b63d6bd22d2596a9607c87a
SHA512

fc088f1d406ac8a0f90878b069c4bf3de371a9ec5cdcb52bd8d5aaf7b3fd0d10220033ad8824681c327ddcf6d586036f17772a13db2696efd16fa470a3994612
SSDEEP

384:G6lCtX3Dxy4gUq7tBJOtAjewpMk3LLxCyB/UBazog:G6w3DxOrJzewpM4LcyB/0azl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aaaf4e59dc698888f4f6a38fc4c9f79

Files

2aaaf4e59dc698888f4f6a38fc4c9f79
.exe windows:4 windows x86 arch:x86

a2953f221a23ce22b7355e0c8c32cd41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
GlobalAlloc
CloseHandle
ExitProcess
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA

user32

wsprintfA

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE