AffoeAIM (1)[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AffoeAIM (1).rar
Size

8.7MB
MD5

7c6ca31e49f5bb3be28100edf6cad7fd
SHA1

6e6de110403cf36a45e87399b83fccdad0339084
SHA256

56534df79becbd986068d55066074f48b9235b2cbe9f11e06edbc325e2deed9c
SHA512

fe6cddd7ad166255b3b1d0205a905ed9f1803c942fad5120f1e015907c8fad86f1b5f7d52430073bcdec2327b93d9c651a23c5d171deb11ea36261f2eb37b8bc
SSDEEP

196608:Pun89Gn6v1RYvGZ1D87bn4Yo3Ua3hEfpL+sH8EnG:W8u61NoXnr6Ua3WL+bj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AffoeAIM/AffoeAIM.exe

Files

AffoeAIM (1).rar
.rar
AffoeAIM/AffoeAIM.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 8.8MB - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ