aa93aba5987a19ef8237b971d29b9b37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa93aba5987a19ef8237b971d29b9b37
Size

28KB
MD5

aa93aba5987a19ef8237b971d29b9b37
SHA1

9df30c56728f59208447885f809fa3ee34c0ed5f
SHA256

e95a8d13d16cb30fd5d54a82a90f104a2689e7a9cbb9d0a36e82dbe90cf9386c
SHA512

ed5d773ec59a8e15c9a12be1b3ecfd39665516cb00ec9a78125ca3c915e8585a4e20ab1934a355b0f87e35ed5d9d97c96aad7727d5da2944ec22f564218e322f
SSDEEP

384:qf82UAUn/lss6Rv4x46Nok5oZdiiiiiiiUUdiliEqImi7/5aSm5Vbh/65ZyBjoeo:d25UntsZ846N5uU2jj41/j5oertnbP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa93aba5987a19ef8237b971d29b9b37

Files

aa93aba5987a19ef8237b971d29b9b37
.exe windows:4 windows x86 arch:x86

1e47a0f5154825ad92bde7492c0e43ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHFileOperation
StrChrW
Control_RunDLLW
SHEmptyRecycleBinA
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW

user32

CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu

gdi32

GdiStartDocEMF
GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

Sections

.text
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE