aa61f049fbd5841fdc69e0850ecb3dbd | Triage

Sharing

General

Target

aa61f049fbd5841fdc69e0850ecb3dbd
Size

91KB
MD5

aa61f049fbd5841fdc69e0850ecb3dbd
SHA1

fa2b981c660600a02c0ba0c64cff12d61055f66d
SHA256

108f2133c8a95e6d1c60371a58ecf688da76aefa9e0af9cb10af694032bf15fa
SHA512

4f488a2b2539bb2aa118a67196c394c515ad992cc5372bfaf79f420bb8dbab3098573503cde0069723deec20837359b11a296fbdad99d698d7461c2c94db9331
SSDEEP

1536:OmursX9cGnYCuM/IQrxInx8GAiPArpLIMSjgGJXgcPk6Sk5MB/YWrp3J8:OmTnYPcIQrxCxJPArOMfgk6SiNElK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa61f049fbd5841fdc69e0850ecb3dbd

Files

aa61f049fbd5841fdc69e0850ecb3dbd
.exe windows:1 windows x86 arch:x86

064abbfef3f23727bc05d463db9dae45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

comctl32

ImageList_GetDragImage

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

CODE
Size: 82KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE