aa5206ec477a7ed78b992e44e8fae6cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa5206ec477a7ed78b992e44e8fae6cf
Size

56KB
MD5

aa5206ec477a7ed78b992e44e8fae6cf
SHA1

0a4f852a32f1c56409e8b86dfb030677389f53d8
SHA256

24c751cc7142ac0d6a8120038fbf85823975e6e2024a1bf7fa5d078596a316e3
SHA512

661dd7a3ed5ad22be932336980f814d1a8eb846a1af10142d3995273d121cc84acafc280b6dcf7c372b892a929e13d8515d2b7472d9fe0892a99a9e213952bbc
SSDEEP

1536:ColF5WK2qW5ARajMOSHS4Ujr6AxV1klKLOvszWKHT:bFdeM9JqeAxV1klKosztz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa5206ec477a7ed78b992e44e8fae6cf

Files

aa5206ec477a7ed78b992e44e8fae6cf
.exe windows:4 windows x86 arch:x86

81b2bbea8fa2825dd9647e1690492332

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
SetConsoleHardwareState
FindNextVolumeW
FormatMessageA
SetFilePointerEx
SetEndOfFile
OpenWaitableTimerA
GetConsoleCursorInfo
UnregisterConsoleIME
GetNumaNodeProcessorMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE