aab558fbd60108a61d64de8a772e76fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aab558fbd60108a61d64de8a772e76fb
Size

21KB
MD5

aab558fbd60108a61d64de8a772e76fb
SHA1

f3cd148fef077490a4e3429fa7b208ae020ef1e5
SHA256

6e754c0ab45b2a2e7b558744708ffb2f8c0da58e0dd296f34645f9e3a2066b9c
SHA512

3bcd1842a061a701a6a098a34f970563d3e208fed196a470644d5eb97a6d482a9bf7cdcc4c47e43929cbb6b5d36c3ebe15e02b40d627ded05df71ec6b69c38c1
SSDEEP

384:oOYlctzqioo9gRfFwHrNgTcWpzh3I7EEBYMm9my7/+TLBPrEwg6:ClctWi8RfFwHrOTfpzh35EBYDj70BPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aab558fbd60108a61d64de8a772e76fb

Files

aab558fbd60108a61d64de8a772e76fb
.exe windows:4 windows x86 arch:x86

96e0b642e7a1dd790f5d01b43e97db27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
ExitThread
FreeLibrary
GetComputerNameA
GetDriveTypeA
GetLogicalDrives
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetTempFileNameA
GetTempPathA
CreateThread
DeviceIoControl
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
CloseHandle
SetFileAttributesA
SetFilePointer
Sleep
WaitForSingleObject
WriteFile
WritePrivateProfileStringA
CompareStringA
CreateFileA
CreateEventA
GetTickCount
GetVersionExA
ReadFile

user32

GetMessageA
PostQuitMessage
RegisterClassA
SendMessageA
TranslateMessage
PostMessageA
FindWindowA
DispatchMessageA
DefWindowProcA
CreateWindowExA
CharUpperA

advapi32

RegCloseKey
RegEnumKeyExA
GetUserNameA
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE