aaa1c734378626983cf942c9d3641c0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaa1c734378626983cf942c9d3641c0b
Size

414KB
MD5

aaa1c734378626983cf942c9d3641c0b
SHA1

8c455aca2b4e37b0baea41b83ebb3fdd8bab213e
SHA256

b21bab783d3e12b082967e51f16f5a081a697a32962e8e048dc829825c2ee6d8
SHA512

14488532ef744981677189cae31379ff140a969c2431ab1a8190776fb8e82182f9385ced19f1272afb214843012c3d330511751372274316ef1fb1588107f527
SSDEEP

12288:q7e+mKm0DWnJ8I3MR3PWjf0lNLZXIwuiTrz5I:VKnDWR3MR3OT0zZIwhTrz6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaa1c734378626983cf942c9d3641c0b

Files

aaa1c734378626983cf942c9d3641c0b
.exe windows:4 windows x86 arch:x86

3fd32c5cc88b57d56c9058eb6cff9edc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

mpr

WNetGetUserA

version

VerQueryValueA

gdi32

SaveDC

comctl32

ImageList_Add

shell32

ShellExecuteA

wininet

InternetOpenA

winmm

waveInOpen

wsock32

send

netapi32

Netbios

msvfw32

DrawDibDraw

avicap32

capCreateCaptureWindowA

urlmon

URLDownloadToFileA

ws2_32

WSACleanup

Sections

.text
Size: 406KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

FSG
Size: 48B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE