aa4adcb9444af53b0fdede6df0f4b014 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa4adcb9444af53b0fdede6df0f4b014
Size

26KB
MD5

aa4adcb9444af53b0fdede6df0f4b014
SHA1

6386a80e1f5f111f906bfe842bc58e3d5ec01765
SHA256

4e349a9bcc2d70258bff099a2dd9ec473885d6880246519c9c3907f278e68328
SHA512

cfacbbf81d04434f5ba659e245dc54899f8e9d2eb20e61e8818056068c4dcdad707cc98183ffebf72f0d4db6343b053d1d63f82bc8b81cd071de95ba809d176e
SSDEEP

768:2p0GaQAhMbMaKh0rZxu8gfQYsTAeFfQy:2p0GxAhHAxfAeFR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa4adcb9444af53b0fdede6df0f4b014

Files

aa4adcb9444af53b0fdede6df0f4b014
.exe windows:4 windows x86 arch:x86

e7ff72bcdfa5e9578ef425e354556675

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu

gdi32

GdiStartDocEMF
GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

shell32

RealShellExecuteExW
StrChrW
Control_RunDLLW
SHEmptyRecycleBinA
SHFileOperation
SHFileOperation
SHGetDesktopFolder

Sections

.text
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE