aa90a5ad9d3df01a79f22901c73f1885 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa90a5ad9d3df01a79f22901c73f1885
Size

28KB
MD5

aa90a5ad9d3df01a79f22901c73f1885
SHA1

3a4353ea4315007eb0f52ab60f4c3ee7a76781d9
SHA256

b12043e6f1ab57f4d39a9661b8077315b4fd1e1a40b8f113433082dadcdf4ecb
SHA512

46c486d1de852fac1ab123fc7b40e0ff45ff98717eced9082e864b05b5cc5378604cd80361cc3e07b1d6f411bb427bdaba4f0fc7439e47b39c75f63622a86735
SSDEEP

768:X/Ozgbh73Oo4dumAbMCSaQNL1CX+g24o/FIuMW4gUQm:X/kgV73O5k9MCSa6L1COn4wI13ge

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa90a5ad9d3df01a79f22901c73f1885

Files

aa90a5ad9d3df01a79f22901c73f1885
.exe windows:4 windows x86 arch:x86

6fe964f82fd57f5fe5af99187f72146e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleA
GetLastError
SetLastError
CloseHandle
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE