aaad547f058272964df8a9f3bfc50de1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaad547f058272964df8a9f3bfc50de1
Size

1.1MB
MD5

aaad547f058272964df8a9f3bfc50de1
SHA1

2179edcc99bf9e7e19006302567e6d4b0e47e951
SHA256

c643437aa65145ff9ca3139da998c14ac7271769d72482d349bf434dc459badf
SHA512

130f12a42136bd6657362e0d503c5baaafd1a2493d6bf084efb1e54c098ee5b1b8b63767b52eb42854c8882648ad3da4276ecac74bafa2d957febb09dfb41b55
SSDEEP

12288:AUXm9k+HCbRCe2sqYlordoAgWPHYLs6eHT2OuRCl7A4EavGSEoEkxbo5LrsUqktg:AUXmBo/ugWvYDeHT/hA4VvhEFOYkI+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaad547f058272964df8a9f3bfc50de1

Files

aaad547f058272964df8a9f3bfc50de1
.exe windows:4 windows x86 arch:x86

a7bbbc378f55cacb51bd14de8bf21f2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleW
GetCommandLineW
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetVersion
GetCommandLineA
GetUserDefaultLangID
GetCurrentProcess
GetTickCount
GetModuleHandleA
VirtualAlloc
InterlockedIncrement
InterlockedCompareExchange
GetCurrentThreadId
QueryPerformanceCounter
SetEvent
LoadResource
TerminateProcess
FormatMessageW

user32

ShowWindow
SetForegroundWindow
PeekMessageA
GetClientRect
EndDialog
GetSystemMenu

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ