aab339b605475abcbd6b542b52e335e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aab339b605475abcbd6b542b52e335e3
Size

114KB
MD5

aab339b605475abcbd6b542b52e335e3
SHA1

54ca760aaf26d8131870d3aa109fd6db40b95834
SHA256

e354042d7e6c78a6fa2b620e56afe34932d5b698d771b4f97353d18bf18a7f95
SHA512

5454b02560da6089883bdb4ed0ad862e018e3ede0cfe3126031b805ff89d8ab2452658224638b53adac01b4f4bbd20f7ca4ea4461f9608d3971ec9756297b92f
SSDEEP

3072:4jLDYQbtnhLY61Nl27j0UupaBkxxr7D8Fn3:4nDdLL71Yj0UHWfD8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aab339b605475abcbd6b542b52e335e3

Files

aab339b605475abcbd6b542b52e335e3
.exe windows:1 windows x86 arch:x86

091f6c7c6bf5506030cf9d7e9c8d5eee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

TextOutA

winmm

waveOutGetPosition

Sections

CODE
Size: 103KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE