aa1ccd8992393b9e0b0925ea1c34d4b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa1ccd8992393b9e0b0925ea1c34d4b4
Size

90KB
MD5

aa1ccd8992393b9e0b0925ea1c34d4b4
SHA1

6096b04249e65023a640991ff2a0f0d295d3e920
SHA256

79c291671bea1fbae53b550ea19bf2bb8ab2ab353b0cfa9960bf2ede5f5f5a2f
SHA512

1e89b86c51bf2c37c693ac9c54de19424636f412f1d89157275d347f9de8527d751700b5f7180595cedb9755d7e8f84aa7d6a43abcb4c0c9a15314d7a2fd6ce6
SSDEEP

1536:GsriYmPtGs6HFldohcEqRwCJGhYSfH8acrWWWFYHUS3TdUta+j9L5ycUcph1AgtX:GLYGtQHc4wCJGuISWFYHTdUIA15+cHmS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa1ccd8992393b9e0b0925ea1c34d4b4

Files

aa1ccd8992393b9e0b0925ea1c34d4b4
.exe windows:4 windows x86 arch:x86

802b5c9f6935c6a08dd58f9f93a0e8e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
GetLastError

Exports

Exports

plr
tqg
wsx

Sections

.code
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 303B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ