aa548d4ed6747ef12013befa9671d0d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa548d4ed6747ef12013befa9671d0d4
Size

76KB
MD5

aa548d4ed6747ef12013befa9671d0d4
SHA1

07689d2aaccdc67cbe242a9fd60b95b3911cbae9
SHA256

06c09509a7697279130f384d028c4059b024e17b4ee636cde644d8982e2683a8
SHA512

906914dbb58a1f5dc274274b59d30d71ef8e08de5e0257d4de9cf736fc3be15bac369dbdf92a2b9361f3362d8bc213f018c2f574742bf29ef44c619c6fc249c8
SSDEEP

1536:d4cEBDf3GCNVojAk0iwCU0d8f0S+oYibojYUdQpjVrs2ryrd1vUQuq6:d4/BDf3GCzMAuwj0W8oNEjgHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa548d4ed6747ef12013befa9671d0d4

Files

aa548d4ed6747ef12013befa9671d0d4
.exe windows:4 windows x86 arch:x86

a90c23791b19ad6576fab6f7363ed44a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameA
SetEvent
SetCurrentDirectoryA
GetSystemTimes
HeapCompact
IsValidLanguageGroup
FreeEnvironmentStringsA
DeleteAtom
Module32NextW
CreateActCtxA
SetHandleCount
GlobalFindAtomA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE