aa92afb08e41e7db9640d9772c56511b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa92afb08e41e7db9640d9772c56511b
Size

56KB
MD5

aa92afb08e41e7db9640d9772c56511b
SHA1

c92b141c663f750decccc5cb9561a7e431f0e676
SHA256

cffa1793161e3014ebb3997dde78a788bb89317413effc92985024f199597942
SHA512

9a7536b8bb47859c2e96d5d80452b83a571d818145c72f5d51670f2d7bd8b8641acc7c8899016f1d9d4e6012ee2c0e6223387eaaddafabe4f53ad2185ba2c4da
SSDEEP

768:qmuUvx5aefElOwL4xvISYDiBwkfk5qd8kqtR:qmP5a+ElOwLQwSc3kc5qktR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa92afb08e41e7db9640d9772c56511b

Files

aa92afb08e41e7db9640d9772c56511b
.exe windows:4 windows x86 arch:x86

8b8b5f2a0f03c8a0d1f63d719c9c20d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
LoadLibraryA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
fflush
fprintf
free
malloc
memcpy
memset
signal
strcpy
strstr
strtol

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 896B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 936B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE