aa2942d829eee7044fa1db4e31496781 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa2942d829eee7044fa1db4e31496781
Size

64KB
MD5

aa2942d829eee7044fa1db4e31496781
SHA1

7fe3911988dfa9179b1af10a6c9050e209bd96fb
SHA256

334a6a8c4467ab481d7ca49afac99513000a3eb828a180a872634a960a183e63
SHA512

0144a512b63e3c7cba6b6203a351ea8183da995017d8d3d42bd585d628e4ef187423155f66fcc304048077edbdee20e70210c542778d04135c04eeb62a093edb
SSDEEP

768:BcGKuNMAU25KCNWRycAHEl6yUE+rKXJojhonkQRZHs+SKxj+g7LZvwTs2fTGhA1q:SGKWTUCNjpJokus05FIYiGy1wnV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa2942d829eee7044fa1db4e31496781

Files

aa2942d829eee7044fa1db4e31496781
.dll windows:4 windows x86 arch:x86

fc4fef604686129c1b37e50fea82d5af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
LockResource
FreeResource
FindResourceA
CreateFileA
GetSystemDirectoryA
GetVersionExA
GetLastError
DeviceIoControl
LoadLibraryA
GetPrivateProfileStringA
GetVersion
GetPrivateProfileIntA
CloseHandle
WaitForSingleObject
GetTickCount
FreeLibrary
GetProcAddress

msvcrt

mbtowc
malloc
strstr
_adjust_fdiv
_initterm
_beginthreadex
time
free
sscanf
gmtime

user32

wsprintfA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

Exports

Exports

_UUSAFEFindSfntKey@8
_UUSAFEInitGlobal@4
_UUSAFEUpdateSfntKey@16

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ