aac6061c9ba0d668721ecce9152e6e51 | Triage

Sharing

General

Target

aac6061c9ba0d668721ecce9152e6e51
Size

48KB
MD5

aac6061c9ba0d668721ecce9152e6e51
SHA1

9094473b02b9290a2cc7ea546b02e4d98db5bf90
SHA256

eba7d1bbd2fd85f66c0837b0b4ff51a2ffe803cb53553b11ba7ab521e0cf8712
SHA512

26b26207246487ab9fe0906ab19c0d1a0ecb9352ad9633cc20eed28f96324ec3abf700767d610f832004e4f7f27b119c140464c0c6a2cd59572c4a5b577708cf
SSDEEP

1536:K4PoI8CODMKLz0Kvh4KejnF/cP4TplijojyMU:K6oI8COvfejWP4TCMU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aac6061c9ba0d668721ecce9152e6e51

Files

aac6061c9ba0d668721ecce9152e6e51
.exe windows:5 windows x86 arch:x86

dac5541a4f86914bcb20495f23e7561f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

wnsprintfA
PathFindFileNameW
PathMatchSpecW
wvnsprintfW
wvnsprintfA
PathRemoveFileSpecW
SHDeleteKeyA
StrStrW
PathCombineW
wnsprintfW
PathFileExistsW
StrCmpNIA
StrCmpNIW

advapi32

CryptReleaseContext
CryptGetHashParam
DuplicateTokenEx
RegCloseKey
CryptCreateHash
RegQueryValueExA
RegDeleteValueA

Sections

.eryx
Size: 39KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gjgdch
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fobsn
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ