aa2857e12557d5e1d43a596d76c32cb4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa2857e12557d5e1d43a596d76c32cb4
Size

27KB
MD5

aa2857e12557d5e1d43a596d76c32cb4
SHA1

ea07bade701e4972eb82d719b6cad1974e35a7a6
SHA256

7885878180e7daeebbccddbf7414d02315228b9db9b3c08db34c9fb17238de59
SHA512

cc3d47540d8436a9211c965997ba6e49e2674d739d5130e14ea2ea0b5f7a5134915aa6dd0426ba987aac8c97863613d0acbaabe3da7045928e0c8e76d956c179
SSDEEP

768:KULdf6Pq5LWQy6QYylNwGufPcz++5JTJv6wZY6XjpY8j:95Lvy6WNwGufPcy+5JT89B8j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa2857e12557d5e1d43a596d76c32cb4

Files

aa2857e12557d5e1d43a596d76c32cb4
.dll windows:1 windows x86 arch:x86

9016ed03fe410cb8e3bc14f1d2920b6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetCommandLineA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
MultiByteToWideChar
OutputDebugStringA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID

oleaut32

GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

Exports

Exports

PTR024

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ