aa4408408f70b0c79f4d193791c138b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa4408408f70b0c79f4d193791c138b4
Size

110KB
MD5

aa4408408f70b0c79f4d193791c138b4
SHA1

1470dea83b3da34db64ea02553a78c812888e5a8
SHA256

6448b0627453d99be3c21e71029cbabc66599e6920fc02ae651fd398ea255a5b
SHA512

6249c4dacaba4b4a3d98ea84c3e95302394946d29f0413286f27bd73070b79a80029cb014dd1fa28ccab9db263f5203e2a16f457ec94be7cc98105f48e5d2fab
SSDEEP

3072:rmdP/jUN6z/no3U2jRA8EIzZp4m70nPs0iN:rmdP/O6z/I1urIzD70noN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa4408408f70b0c79f4d193791c138b4

Files

aa4408408f70b0c79f4d193791c138b4
.exe windows:4 windows x86 arch:x86

4d8e9e06f8e51550e3e5089179e9846d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PEinject
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccg
Size: 88KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE