aa70cf1a38be5591b2f3780de4480da9 | Triage

Sharing

General

Target

aa70cf1a38be5591b2f3780de4480da9
Size

83KB
MD5

aa70cf1a38be5591b2f3780de4480da9
SHA1

3a02bd83633699ed58be44308b7219c19e58abc8
SHA256

8478e5378386bc1d0fdd55680786d2ec893cb5ada34811f7bc92ebed1a6a08a1
SHA512

944de2cbd96c82b3c07da6a27c03a26e6135705a8c1cbc4d20085c649e792d55440e76e60c24e455b3879222735a301b1580440f8bc3b36c9d640da2d66706ed
SSDEEP

1536:Q+a3/3lmw36ZrMum+0snhOBJXfIbhr4CYLNT8zNPjEErxTWDTMqhGKYIZTET8bDQ:g/3lmS6ZgshsxjVRT8JjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa70cf1a38be5591b2f3780de4480da9

Files

aa70cf1a38be5591b2f3780de4480da9
.exe windows:4 windows x86 arch:x86

c484c07a9abaa9affb68abb3fd19eefe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDepthSList
GetConsoleKeyboardLayoutNameA
GlobalUnlock
BaseCleanupAppcompatCacheSupport
GetTapePosition
CreateProcessA
FreeEnvironmentStringsA
GetConsoleAliasExesLengthW
WaitForSingleObject
ExpungeConsoleCommandHistoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE