aaa1c0e670a7a1c27991c49646c20788 | Triage

Sharing

General

Target

aaa1c0e670a7a1c27991c49646c20788
Size

3KB
MD5

aaa1c0e670a7a1c27991c49646c20788
SHA1

3dae3bb6c9a393590b016cbf0f989133bfeb153c
SHA256

f01a56e90f72413641f45d68d718f503c62115ee17cf72f48f9d659d5a90d677
SHA512

a60c6615ae177d8a040d25854ebefde228423fd0d3da6b4b645ab9a48631bc98a28b65954f53e686bc2512a890b875011aa8f6c2f73414f975c2f57aeded9990

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaa1c0e670a7a1c27991c49646c20788

Files

aaa1c0e670a7a1c27991c49646c20788
.exe windows:4 windows x86 arch:x86

64f4da4ad6c469756a68ac175658b2fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle

kernel32

GetShortPathNameA
VirtualAlloc
GetModuleHandleA
ExitProcess
GetLastError
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetEnvironmentVariableA
lstrcatA
lstrcpyA
GetTempFileNameA
GetModuleFileNameA
MoveFileA
lstrlenA
VirtualFree
GetTempPathA

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE