aa5bd87f6db99278ae8d7e561fb31810 | Triage

Sharing

General

Target

aa5bd87f6db99278ae8d7e561fb31810
Size

55KB
MD5

aa5bd87f6db99278ae8d7e561fb31810
SHA1

f195eed3915c9beaeb25ee6997daf50b6cc97565
SHA256

0f52c63aefce1b11ee237636ae8dfa9b63775d5d495a358ef697b572eb0be44b
SHA512

ff6316e93686bfde8cbf94495708f93af25996b4604b6fd4634f27d632f526ba293ad755179766ecb5f97a2a9cffced7c6a8fdf80ed6f85bc06ccf2e251e1a51
SSDEEP

1536:SArUv5tKzNhaIlxf2SuMklatQMhR1ouovmLB:SCNdxf2SHttD2FuL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa5bd87f6db99278ae8d7e561fb31810

Files

aa5bd87f6db99278ae8d7e561fb31810
.exe windows:4 windows x86 arch:x86

9ec0e68903642285d49e53b210508c63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReplaceFile
SetProcessShutdownParameters
WaitForMultipleObjects
HeapLock
SetConsoleNumberOfCommandsW
ExpandEnvironmentStringsW
GetLogicalDriveStringsA
GetLongPathNameW
CompareStringA
WriteConsoleOutputCharacterA
InitAtomTable
FindFirstVolumeW
BackupWrite
TransmitCommChar
WriteTapemark
EnumDateFormatsExA
GetConsoleAliasesW
GetCompressedFileSizeA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE