aa68fd8cf7a43d73cd8d3056cfa74d15 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa68fd8cf7a43d73cd8d3056cfa74d15
Size

39KB
MD5

aa68fd8cf7a43d73cd8d3056cfa74d15
SHA1

4428e5585f73b9c0b1de49a8615d0e4f8d9ba0a7
SHA256

027c0570e3940d4afbd243b1bd09f42e76d272ea42cb4435286e32c2644a6a53
SHA512

2ad27315beed51f00fea66018113925cd24208fd33a0df6970555b14192b92eafe004f5dc7b9176bc2674db4358e18a95c5450862f226ff87a882f8ff3f8ac96
SSDEEP

384:taiFZUgnCBH6SF1yq3vXpDEiOfqcjhfvEeZNdW3GY2MLNfrXXVzmrLWeauxRLUXe:osbSbyqX5EiOfBVvDf83xn7gxRwtMX5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa68fd8cf7a43d73cd8d3056cfa74d15

Files

aa68fd8cf7a43d73cd8d3056cfa74d15
.exe windows:4 windows x86 arch:x86

76fa5274149873678bdee36e9645f8cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
FreeLibrary
GetCommandLineA
lstrlenA
GlobalAlloc
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
GetUserNameA
RegOpenKeyA

msvcrt

strcpy
malloc
strlen
strcmp
memset
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
realloc

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ