3aa51d11023803ffea71e1eea6ca325b | Triage

Sharing

General

Target

3aa51d11023803ffea71e1eea6ca325b
Size

6KB
MD5

3aa51d11023803ffea71e1eea6ca325b
SHA1

6758445595c13671c4bd47a206326eccfa021dd9
SHA256

53360513de3786dc38be4d2b8b2d766a089388c2a4ef0fd1edb9e39da87901cc
SHA512

bc46d2dbc482ccaa07244dc46d151a82e2023cf3487ba3e6cbc9f8c8c327640bda92253990e5098abf388f0abd69a0f83b4d1bdad2cc2cd8125ebcaed5000cb6
SSDEEP

96:iL4YAsJyFrj82yF+Hayhx2s+lTRDrnnPHHfnP/L8RXWNtTUiMh9gr63:ivyFsxFtyLn+hRDDHHnT8RX4J4aW3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aa51d11023803ffea71e1eea6ca325b

Files

3aa51d11023803ffea71e1eea6ca325b
.exe windows:4 windows x86 arch:x86

d1500a53f8140d32d2992eb2b5e5b8c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsA
WriteProfileSectionA
EnumDateFormatsExA
WriteConsoleInputA
MoveFileWithProgressW

user32

CreateDialogIndirectParamA
CharPrevA
LoadMenuA
DefWindowProcW
SetClassLongA
TranslateAcceleratorA
RegisterDeviceNotificationA
GetWindowTextA
InsertMenuItemW
IsDialogMessageA

gdi32

GetICMProfileA
RemoveFontResourceExA
GetObjectA
GetOutlineTextMetricsA
GetCharacterPlacementA
CreateFontIndirectA
GetCharABCWidthsFloatA

Sections

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 1024B - Virtual size: 769B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ