51aa4fa3702c436d409ba619d507b388 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51aa4fa3702c436d409ba619d507b388
Size

759KB
MD5

51aa4fa3702c436d409ba619d507b388
SHA1

97634a7669b005fa060e26704a7f797c3ed4862e
SHA256

36afe10b3fae299a2185f365c047e4d85252489fbb7584297fbeb52ec504e6f5
SHA512

cdb765ae0fbedcbc6a1cf3a704e0da0c4bb873d5123cd7196317c417b28136376e0e00a56907c062d0acbca718dad7e15e36c16d1106e4b987833d5cab583640
SSDEEP

12288:clxDY8PSxi6TE2BxhfgOnfaPx2gw/+cj9fyntbTPLlPTkkuGrBkGFvg4vNAr:cXM8PS06IixhgJHWjjJ6tbTPLlPTkkfC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51aa4fa3702c436d409ba619d507b388

Files

51aa4fa3702c436d409ba619d507b388
.exe windows:4 windows x86 arch:x86

a7466f497c633e19b7fefbc83b9eb70f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
CloseHandle
GetCommandLineA
EnumResourceTypesA
TlsGetValue
GetModuleHandleA
GlobalFlags
GetDriveTypeW
GetCommandLineA
lstrlenA
CreateEventW
CloseHandle
GetTimeFormatW
GetConsoleTitleA
GetFileAttributesA
GetEnvironmentVariableA
GetStartupInfoA
VirtualQuery
HeapDestroy
HeapCreate

advapi32

IsValidAcl
RegEnumKeyA
RegDeleteValueA
IsValidSecurityDescriptor
IsValidSid
RegCreateKeyExW
InitializeSid
RegQueryValueW
CreateProcessAsUserA
IsValidSid
IsValidSid
IsValidSid
IsValidSid

asycfilt

FilterCreateInstance
FilterCreateInstance
FilterCreateInstance
FilterCreateInstance

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 753KB - Virtual size: 752KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ