7aaab376fadfa41853401aeb705326cd | Triage

Sharing

General

Target

7aaab376fadfa41853401aeb705326cd
Size

71KB
MD5

7aaab376fadfa41853401aeb705326cd
SHA1

4265483f0bcba15b1f7cf88c46d934f42c14fc16
SHA256

b649b29a66f2e118aa8e57c6fd39f3f92594b05086158cb35efd0278270f91c5
SHA512

73e31c7f5895f9406222410c9ea7ecda60c0c800e770dba430a6fc339820705298852f3012927259a482f683428b995b0da13ec53b3539ccc8d122c9b1550f23
SSDEEP

1536:NORSD9g2Y1A3I4H517adPfEiwb8G8JmO/wfur4raXqp9AAPlhbV6:Lg2Ya3I4nafC83ofur6Mc93lh4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7aaab376fadfa41853401aeb705326cd

Files

7aaab376fadfa41853401aeb705326cd
.exe windows:5 windows x86 arch:x86

5bdc41c6e791e5dfadb53454999bd37c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA

user32

RegisterClassA
LoadIconW

shlwapi

StrCmpNIW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DER
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ