4aa98e34841506e7ab94621d52d57898 | Triage

Sharing

General

Target

4aa98e34841506e7ab94621d52d57898
Size

7KB
MD5

4aa98e34841506e7ab94621d52d57898
SHA1

cbf32c86e55fd65d47edf1c85a079440ec2cbb58
SHA256

75f058c59781c6729a07729b1aa4e8386eb38a536b37bdcf9533ae4b730d362d
SHA512

aaf97c315c7b017b87d6824eb24041cecaff4847b9f33619316f07181d2ec47f4528c6367323614a84672eed6f4b20883786cfa4a020b0f94dcc964e3c0b505b
SSDEEP

48:KIQ3oi2rU3687g89cXw+FnPnPuNZx+z4d/+tstiUOaOTGOAWEevm4fO4AveAup+R:lPrH8M89cX5PPuF+zIhvjhUimV8Jl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aa98e34841506e7ab94621d52d57898

Files

4aa98e34841506e7ab94621d52d57898
.dll windows:4 windows x86 arch:x86

b5f37e0ff668e7161f2599a8895843e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTempPathA
CreateProcessA
MoveFileA
DeleteFileA
lstrcatA
LoadLibraryA
CreateThread
Sleep
GetPrivateProfileStringA
lstrlenA
CloseHandle
GetComputerNameA
GetProcAddress

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA

msvcrt

free
_itoa
_adjust_fdiv
atoi
memset
_strrev
_initterm
malloc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ