aae9981efcd937f07dbed5c6d00b1505 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aae9981efcd937f07dbed5c6d00b1505
Size

37KB
MD5

aae9981efcd937f07dbed5c6d00b1505
SHA1

f476e30465b979cdd7239b778c925fa0c41326c1
SHA256

3c8afe3f1fde91a7151eba8245410552bb0c2ac5ab692d3b9695ec6ee7b61fa7
SHA512

4fb880348ac6c6b85fcfd228ed58bcd357cc3af9704482c80084af08070ec0b40150d7db38ed032eeacfb918d0f6b0ee1480c8e400ccfa30a2e84e05fa12dbb6
SSDEEP

768:qYSW/+nGbyLwHG6sLr9WlFUzRcjMW5VSJM2sfMTgs/yc5NzK0X1eCJi8fE/aCQWe:qYV2nGbys1arFcjMW7Sevfx6yy2+eC5b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aae9981efcd937f07dbed5c6d00b1505

Files

aae9981efcd937f07dbed5c6d00b1505
.exe windows:4 windows x86 arch:x86

af6c02bff52c59631c4b0bc30351a900

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
VirtualProtect
SetSystemPowerState
lstrcpy
GetVolumePathNameW
SetLocaleInfoW
LocalFileTimeToFileTime

user32

CharPrevExA
EnumPropsExW
MessageBeep
GetParent
OemToCharBuffW

gdi32

PathToRegion
EngAcquireSemaphore
IsValidEnhMetaRecord
GdiComment

Sections

.text
Size: 1024B - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE