aaef1133e575d511c3b80f83738b3fc8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaef1133e575d511c3b80f83738b3fc8
Size

208KB
MD5

aaef1133e575d511c3b80f83738b3fc8
SHA1

3ee780eae29208c809c0749a1760a1899b27e310
SHA256

a46d434a8158889a799a9797cf8e36150ba05928d167b0566f6055dc35bc374a
SHA512

e607c2e784c784b2477cd8bbf6e3f8818074e40d6f8625ee264e25ed2a4cc2d1814f117555d04a12ff117b32cc573d93308f4bed5acca7c5ac98ecf780deede8
SSDEEP

6144:Ll4mjZF//ktX+6ejqBlSrDejeuOu4fnG6qEbCbVj:/r//ktqiUVueG6qEO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaef1133e575d511c3b80f83738b3fc8

Files

aaef1133e575d511c3b80f83738b3fc8
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE