3aec856e04b9fa4e5273f0a0fb5e5f0f | Triage

Sharing

General

Target

3aec856e04b9fa4e5273f0a0fb5e5f0f
Size

198KB
MD5

3aec856e04b9fa4e5273f0a0fb5e5f0f
SHA1

c26ed5c7d935fdbd5fb35bc8550effda023c4c20
SHA256

afb100561bb893b16a5609fc359f4593f3b115da4fdeaac64dfc3c980f68b48b
SHA512

f4bdf6d0ff6d7846812e48f90739c5fc82465bfddb0374ccf882da36e3fceea23baff2d6e7dc423593e82ff3b45cd9a97c55a1a0449b2255a71630efb94d9c1f
SSDEEP

3072:rg+mrh42ya4kcFoWZHlWzzXGOJlBpPlPlUsVa07h+7dUchBYAp:rkrh42xcTHlrMXRlPt+7dd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aec856e04b9fa4e5273f0a0fb5e5f0f

Files

3aec856e04b9fa4e5273f0a0fb5e5f0f
.exe windows:4 windows x86 arch:x86

f9cb13eaf34ee76d9832e3edb319c9e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
LockResource
LoadResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE