aa58ee56d5f69796ae1cff3eb22a65c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa58ee56d5f69796ae1cff3eb22a65c6
Size

88KB
MD5

aa58ee56d5f69796ae1cff3eb22a65c6
SHA1

2893ccd4584053c7d6fff3bd6e20dfe47ea1456f
SHA256

be05eb7cd7c2aee663dddaa79e167bf7e7dbc8b71f80316fb2a8d0f116b23906
SHA512

6701b1cd4b69beaa7811f95165f841656ea47946f7a4d18447f4b8d2eb1ab9bfe3a5ac004b783f5636e60622eea0457e02c2b622b5c215da45bd9c703456027c
SSDEEP

1536:LdyDkyWGoUnj7eSsOX4lXxS7nPWHGg2Oplype0HY7ylQPhwmyV49nHGRDa:5APeSolwzqcOnO4EQPhbaYnHf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa58ee56d5f69796ae1cff3eb22a65c6

Files

aa58ee56d5f69796ae1cff3eb22a65c6
.exe windows:4 windows x86 arch:x86

42168c3cc76297aa0e35a07be235d859

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
VirtualAlloc
GetLastError

Exports

Exports

aqfghj
ddddcv
ploh

Sections

.code
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE