aa798222d172cfbbe7567cb242be2d9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa798222d172cfbbe7567cb242be2d9a
Size

46KB
MD5

aa798222d172cfbbe7567cb242be2d9a
SHA1

a5ad3401054cdc811ca974cdab6fd8944306d9db
SHA256

96732c4e3fb16d52bc11e3e2e8773e85f46b11f262aa0df62f797c6f69bb62de
SHA512

17a4f8a281ee26b4c7e510af6d18c33ef6f9a6c68614ea48a06acabf33462aeeea89701eb48688aad4d9968e6b3c1cd4b22620ef51aa718a2020aef97d083a9f
SSDEEP

768:U71cTDXzTtcYHaK6Yzce8HYGI/UqItkYMje7qA/nnrkQIvsRlFePclY+MK5cDIVF:U712zZatYzce8XeSkYMPAvnrBtTFKuMq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa798222d172cfbbe7567cb242be2d9a

Files

aa798222d172cfbbe7567cb242be2d9a
.exe windows:5 windows x86 arch:x86

2127b56f44edaa8705001bcce03402d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageW
SetTimer
GetWindowLongA
DispatchMessageA
GetFocus
EnumWindows
GetDlgCtrlID

kernel32

GetProcessHeap
GetModuleHandleA
GlobalLock
GetTempPathW
ExitProcess
GetLastError
VirtualProtect
GetSystemTime
GetCurrentThreadId
InitializeCriticalSection
Sleep
SetConsoleCP
GetLocaleInfoW
GetCurrentProcessId
RaiseException
GetACP
GetModuleFileNameA
GetLocaleInfoA
MultiByteToWideChar
GetWindowsDirectoryA
GetProcAddress
GetCurrentProcess
GetModuleFileNameW
GlobalAlloc
GetLocalTime
GetCommandLineA
RtlUnwind
HeapAlloc
SetStdHandle
GetSystemTimeAsFileTime
CloseHandle
GetCurrentDirectoryW
GetStartupInfoA
HeapDestroy
GetOEMCP

lz32

LZDone

msvcrt

_vsnwprintf

ole32

CoTreatAsClass

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ