aa041237b99a7e38da9dfab7799c5150 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa041237b99a7e38da9dfab7799c5150
Size

36KB
MD5

aa041237b99a7e38da9dfab7799c5150
SHA1

72d18cc2078f7d1b845999f2ffe52d2e01f08aa4
SHA256

9fe38d567ca88429c996994a4d152c3842db9c2d9b6de624ebaa688444b019eb
SHA512

6020b663ba1a83301628de2bd383a7d1f389b92464574d8a0477f114c45bebb3f2533c5d106b25f8398cbbeb70a1bcbca81a96bfb56afc62f611cfa4ea54215e
SSDEEP

768:+WXmhPzgX/BLy6sUx+iZ2Au6jgP523resZO6ZmNL6nHHB5ZIVmd2I:+hLukCJjlenyXZWmd2I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa041237b99a7e38da9dfab7799c5150

Files

aa041237b99a7e38da9dfab7799c5150
.exe windows:4 windows x86 arch:x86

8c2ad4672d9f57917a49539205a48b36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

SetConsoleWindowInfo
GetSystemPowerStatus
InterlockedIncrement
DisconnectNamedPipe
HeapDestroy
GetQueuedCompletionStatus
GetTimeFormatA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ