aa5f4bdfa1fc69de1839ad9723aba85b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa5f4bdfa1fc69de1839ad9723aba85b
Size

18KB
MD5

aa5f4bdfa1fc69de1839ad9723aba85b
SHA1

ced14ec48798fd77ff4dd455bd2885760b0d741a
SHA256

8a56a7e4cb8b3bb87875baccb127460a341ada26917d118263e52bbbc2840f1c
SHA512

f04f605fa796486bbc49789623d47ed2b5e5f62a895fca8f39a7b7379126eb96d29e341505c8cda9082692d9bb9b55bf16c97e26a3df49af799b44d0419ddf71
SSDEEP

384:YfYvPoiUK+ViJsX3Ij8Tp3fgUAod1n6Q/ET25CvmwweFLMwS2xQ0u:NcK+VfX3Ij813IFod1L/ET25CvLM2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa5f4bdfa1fc69de1839ad9723aba85b

Files

aa5f4bdfa1fc69de1839ad9723aba85b
.exe windows:4 windows x86 arch:x86

6764baeb8d960aa00c9977cb9882bb94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE