aa2066ed8fcad52a73184e66a047b7bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa2066ed8fcad52a73184e66a047b7bb
Size

165KB
MD5

aa2066ed8fcad52a73184e66a047b7bb
SHA1

66a50ed7fdbadf3fcc5fad8787a5c569d8b56b30
SHA256

d6e1a6aec28c3958904cb1ebafdd545e33fe422046dc2de5bac7bf5657a20d70
SHA512

4d6e5aef22243e1eda66afc3f57b919093c1059f24a0e72c287b64c0d3858ebc9998ac0f79a52c4e375f0451c248a718df2390f0b28f474412579ed531f6d4ed
SSDEEP

3072:Pe1y3eX7V1zlJVpoAx8L3rH8Iy/PlQJ5ISWoNwfH2JjRlxpsz:Pe1y3S1xrqA8LmulZa4Rlxaz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa2066ed8fcad52a73184e66a047b7bb

Files

aa2066ed8fcad52a73184e66a047b7bb
.exe windows:4 windows x86 arch:x86

cd755f0bd6c6325507b97d09eabbc9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 132KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE