aa86e3b979005aef3d6ba087a699514b | Triage

Sharing

General

Target

aa86e3b979005aef3d6ba087a699514b
Size

540KB
MD5

aa86e3b979005aef3d6ba087a699514b
SHA1

7b1915ef0d0b3caaaa0040f7b80541414caa0cc5
SHA256

5a7fea2951fc0d8182ad23d8f424e6f286ea77979a4e904321f165921d85d385
SHA512

f122728ddce70c6b0eb87c50ac55b9682994a45221614ff5f5f7fde551777dbf7102975d9645b5717bd5b7068e84fd46156a1b836232759a016799d45424af7e
SSDEEP

12288:bYoDL647vcNF5BBYCIcF9k0uJ+xVtPL4CscggpCgd:bZ3mk8kQxTP0CdgJG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa86e3b979005aef3d6ba087a699514b

Files

aa86e3b979005aef3d6ba087a699514b
.exe windows:4 windows x86 arch:x86

542f4e8a95a4b0f4d16b148e2e34b691

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

ord666

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE