aa041426ec7c718566a1533369d0c3c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa041426ec7c718566a1533369d0c3c4
Size

1.9MB
MD5

aa041426ec7c718566a1533369d0c3c4
SHA1

bb580347c413e67a9e396779b41246b2209380bf
SHA256

38ec53acb11db4bd724e546c515ae8f68b8275f0acc760d4b75998a793a55e7d
SHA512

6e0ed44ba2f8cc3aa26745d88bed6e5e6fc9eac1062452de8bc9040b04eae006fe3321e971ee0875f7eabd0d8dd730df2ff22995af9d53156ae542af2303fc05
SSDEEP

49152:QX2ZCA9s6x6yukX74HDrd793UTYZ4+H0KFy99o7U75gwp5ZqTR:QXZb6xluf793U8Stzg475l4t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa041426ec7c718566a1533369d0c3c4

Files

aa041426ec7c718566a1533369d0c3c4
.exe windows:4 windows x86 arch:x86

9a957ab8431180c393f29dedb3586e7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

msvbvm60

ord621

Sections

pec1
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE