8aa86b8cd395c164a52ea550da426b0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8aa86b8cd395c164a52ea550da426b0f
Size

160KB
MD5

8aa86b8cd395c164a52ea550da426b0f
SHA1

176c106732161fdafcf230959452af6e185720ab
SHA256

3d2c456d6ba1424f8b12e2a8092d44b725b8e8edc468923336dc496c44184536
SHA512

f72052653fcde3603327f494a365b663e4540fbab7c7106637fef5f70287c5f50327b06a81e147ac04803d2b0823f8f02ec2f7780949ce0ee68a268a2cca8972
SSDEEP

3072:GVKxgo4RmA13VQfzhdFKq/+4GrBPgbgWZj1tIWcsWqm9d0At/aofMJ:Jj4tz7whGrBPgbgeIsWxGAtZfK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8aa86b8cd395c164a52ea550da426b0f

Files

8aa86b8cd395c164a52ea550da426b0f
.exe windows:4 windows x86 arch:x86

b9b6282a3fef0a582cc2aa7bd505f956

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
ExitProcess
CreateFileA
CloseHandle
GetCurrentProcess
LCMapStringA

user32

wsprintfA
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegCloseKey
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegDeleteKeyA
RegCreateKeyA
RegEnumValueA
RegDeleteValueA
RegOpenKeyA

Sections

.text
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ