4aeaec6dcc9839d1bdf74d375ca99c96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4aeaec6dcc9839d1bdf74d375ca99c96
Size

88KB
MD5

4aeaec6dcc9839d1bdf74d375ca99c96
SHA1

ea4fb562f680defe2580376d6d31fa1e962f827e
SHA256

3e9f7c5e10adc4fd5310895bb3839faf8c97fc5412357a49d002e5b369b93f70
SHA512

07553a4ae04fb21f86741ea87568307f5d8cbbb906f3bcc3dc6986a0c69231d93c1eb152aa2184e3527cae637bbea449ee40ef482a9ec61fc796597585697f38
SSDEEP

1536:FYFmJUHLNjr2RnnnUTZNnL0lUcGqKf9B:FSmJcxKRnUTLn4ufB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aeaec6dcc9839d1bdf74d375ca99c96

Files

4aeaec6dcc9839d1bdf74d375ca99c96
.exe windows:4 windows x86 arch:x86

cf70ecd1039bd24870c5cf1bb036659e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLocalTime
FreeConsole
IsBadStringPtrA
CloseHandle
VirtualProtect
CancelIo
LocalFree
GetLastError
LoadLibraryExW
IsBadReadPtr
EnumResourceTypesW
GetDriveTypeW
GetModuleHandleA
GetDiskFreeSpaceExA
TlsGetValue
FindClose
SetLastError
GetDateFormatA
ResetEvent
GetCommandLineA

advapi32

RegEnumKeyExA
CloseTrace
IsTokenUntrusted
RegCloseKey
CloseEventLog
LsaFreeMemory
FreeSid
AccessCheck
OpenEventLogA
GetLengthSid
LsaClose
RegCreateKeyExA
GetFileSecurityW
RegCloseKey

hnetcfg

HNetFreeSharingServicesPage
HNetDeleteRasConnection
HNetGetSharingServicesPage
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE