aac6e38b620d6e5f14c9266e0be34a8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aac6e38b620d6e5f14c9266e0be34a8d
Size

1.5MB
MD5

aac6e38b620d6e5f14c9266e0be34a8d
SHA1

439790b2832c38cd8fe7d651dfc8b9d463b0e1ea
SHA256

7887ed8b1571e1a99ada58c2454ada09779146e90d00dd82ed89a915212863d5
SHA512

3f4d3a1139a486a99c832fcef79fbd875f4fb38a24524eb0bc9ab9fcf26e6e35fc816bc6991be5acb55e01a03bd4a1aa6a42360ea72c94f714cdda9619897ff3
SSDEEP

24576:AAwxgIf1LJMcpJuqKuKZtEVDya/IDdzbgZAFPXU++otgRoYkfR9cwasCkldXo:AA/MLJ2qwZKo5ZU+e7kfRWOFo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aac6e38b620d6e5f14c9266e0be34a8d

Files

aac6e38b620d6e5f14c9266e0be34a8d
.exe windows:4 windows x86 arch:x86

1bd0c2c45c787fc783edfe476e92d458

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32 kernel32

DeleteCriticalSection �

kernel32

DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

user32

GetKeyboardType
CreateWindowExA

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

iphlpapi

GetAdaptersInfo

shell32

SHGetFolderPathA

Sections

CODE
Size: 206KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 19KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ