aa8ec6309f4b9177485d833c2249d959 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa8ec6309f4b9177485d833c2249d959
Size

266KB
MD5

aa8ec6309f4b9177485d833c2249d959
SHA1

9da68a2378e2c27eb041c4b964d52f8bca4bf057
SHA256

5105a5d7d6cc06c0866665a8b0d6fc8ea03b7345bc2cbfc26d287104a12bd772
SHA512

176dd6553c778cf572844caabd83e4ad19b875c0844e5b59b29897a7aea26a4c167a82e24fb9b4cf22dc6c5e41bdb1687949f0ffbb612459b534c62270905f7d
SSDEEP

6144:LuQvROIK1lA7sgTGKKcrYQ/Kl4e9rJgdE/0+GTzToYkS4l22dLLj:3VKA7VrmQ/cn10bTzToYkSQX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa8ec6309f4b9177485d833c2249d959

Files

aa8ec6309f4b9177485d833c2249d959
.exe windows:4 windows x86 arch:x86

daf33f01634d83b9d63af43a903c7fe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA

shell32

SHGetSpecialFolderPathA
SHCreateDirectoryExA

msvcrt

fopen
_c_exit
_exit
_XcptFilter
_cexit
exit
fclose
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
malloc
free
fwrite
div
isalnum
isalpha
isdigit
isgraph
islower
isprint
ispunct
ldiv
ceil
srand
rand
sprintf
_acmdln

kernel32

SleepEx
WritePrivateProfileStringA
OutputDebugStringA
CloseHandle
GetStartupInfoA
WinExec
GetTickCount
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ